Allowing recursion for just specific zones
chris.p.buxton at gmail.com
Wed May 12 13:48:37 UTC 2010
Close. I mean a properly-configured instance of squid, or a SOCKS
proxy, or whatever other non-DNS, application level proxy you want to
provide. Just configure your kiosks to use them. Then the kiosks
themselves don't need DNS resolution at all.
On 5/12/10, Brian Candler <B.Candler at pobox.com> wrote:
>> Or else set up secure proxies and disallow all DNS resolution (an
>> empty root zone).
> I'm not sure what you mean by "secure proxies". Do you mean some non-BIND
> software capable of forwarding and filtering DNS queries/responses? If so,
> do you have anything particular in mind?
Sent from my mobile device
More information about the bind-users