DNS queries to blocked countries?

Barry Margolin barmar at alum.mit.edu
Fri Jun 22 02:25:20 UTC 2007


In article <f5eeb8$1ud8$1 at sf1.isc.org>,
 Edward Lewis <Ed.Lewis at neustar.biz> wrote:

> At 10:21 -0700 6/21/07, Chris Buxton wrote:
> >You could use forward zones for specific domains. For example:
> >
> >zone "samsung.com." {
> >	type forward;
> >	forwarders { ip-addr-1; ip-addr-2; };
> >	forward only;
> >};
> >
> >I don't know of any way to do this based on IP addresses, subnets, or
> >initial failures. Therefore, unless you want to turn on forwarding
> >globally, I don't see any solution other than the one above.
> 
> 
> Views!  match-source { axis-of-evil; } .... ;)

I don't think so.  He needs to do it based on the destination of the 
recursive query, not the source of the original query.

-- 
Barry Margolin, barmar at alum.mit.edu
Arlington, MA
*** PLEASE post questions in newsgroups, not directly to me ***
*** PLEASE don't copy me on replies, I'll read them in the group ***



More information about the bind-users mailing list