Resolve only authoritative domain for internet/public addresses

Phil Mayers p.mayers at imperial.ac.uk
Sun Jul 8 08:24:22 UTC 2012


On 07/08/2012 07:15 AM, Mr BeEye wrote:
> Hello all.
>
> Let's have a finite list of IPv4 (private and public) addresses, e.g.
> {A, B, C, ... N}.
>
> It is possible to configure BIND in the way:
> 1) BIND resolves EVERYTHING for {A, B, C, ... N}.
> 2) BIND resolves ONLY its authoritative domain for internet excluding
> {A, B, C, ..., N}.
>

Yes. Use a view:

view internal {
   match-clients { a; b; c; ... n; };
   recursion yes;
   zone ... {
   }:
};

view external {
   zone ... {
   };
};

However, views are tedious in many ways. You need a copy of your 
authoritative zones in each view, and have to arrange the AXFR/NOTIFY to 
go to the right place. It's much easier IMO to run two different copies 
of bind on two different IPs (or machines).



More information about the bind-users mailing list