Dynamic ACL
Barry Margolin
barmar at alum.mit.edu
Wed Apr 8 14:41:45 UTC 2015
In article <mailman.1908.1428494842.26362.bind-users at lists.isc.org>,
Ali Jawad <alijawad1 at gmail.com> wrote:
> Hi
> I am running BIND 9.10 and I have looked through various options including
> DLZ and RPZ but I am still not sure if they can do what I need or if i need
> to look at something different. Here is my scenario and I would appreciate
> if you could advice me.
>
>
> - I do have 6 different Geo ACLs and a default ACL
> - Each ACL has its own zone file , users get served based on Geo
> location. If the users are not part of any geo location they are
> served the
> default ACL and zone files.
> - For a few hundred users I want to asign their IPs to specific Geo
> locations even if they do not belong to those locations. I want
> to do this
> on the fly without having to edit zone files and if possible
> without having
> to reload BIND. I want to keep it as dynamic as possible.
>
> Any input please ?
>
> Regards
Sounds like you should be able to do this all with views. When you
reassign an IP, you edit named.conf to change the "match-address"
clause, and use "rndc reconfig" to load the new named.conf file.
--
Barry Margolin
Arlington, MA
More information about the bind-users
mailing list