Blocking reverse lookup queries for private ips

Tony Finch dot at dotat.at
Tue Nov 22 10:57:00 UTC 2016


Sachin Patil <04sachin at gmail.com> wrote:

> I want to return nxdomain for any private ip reverse lookup.

BIND does this by default. Look for "built-in empty zones" in
https://ftp.isc.org/isc/bind9/cur/9.11/doc/arm/Bv9ARM.ch06.html

Tony.
-- 
f.anthony.n.finch  <dot at dotat.at>  http://dotat.at/  -  I xn--zr8h punycode
Southeast Iceland: Northerly 4 or 5, becoming variable 3 or 4. Rough becoming
moderate. Wintry showers. Good, occasionally moderate.


More information about the bind-users mailing list