<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 12 (filtered medium)">
<style>
<!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;}
@page Section1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.Section1
{page:Section1;}
-->
</style>
<!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=EN-US link=blue vlink=purple>
<div class=Section1>
<p class=MsoNormal>I was wondering if Bind allows you to override certain
records for zones we are not authoritative for. Essentially we have a virus
that some users have been infected with, and we want to temporarily blockout
the domain name of the server that this virus connects to to send its
information out. (Basically by having this domain name point to 127.0.0.1) I
know it is a protocol violation, but I was just wondering if it is possible to
do this and what would be the best way of going about it. We essentially have
two servers with two views. One view serves our DNS zones to the outside world
(With recursion disabled) and the other performs recursive queries for our on
campus users. Obviously we would only be doing this on our internal view.<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>Thomas E. Casartello, Jr.<o:p></o:p></p>
<p class=MsoNormal>Staff Assistant - Wireless Technician/Linux Administrator<o:p></o:p></p>
<p class=MsoNormal>Information Technology<o:p></o:p></p>
<p class=MsoNormal>Wilson 105A<o:p></o:p></p>
<p class=MsoNormal>Westfield State College<o:p></o:p></p>
<p class=MsoNormal>(413) 572-8245<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>Red Hat Certified Technician (RHCT)<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
</div>
</body>
</html>