<div><span style>Hello,</span><div style><br></div><div style><font color="#222222" face="arial, sans-serif"> Thanks for your response. Ok, now I understood what happend. I created the 10.in-addr.arpa arquive and now I'm authoritative for all the reverse address space 10/8. I believe I will not querying the Internet's name servers for these address anymore.</font></div>
<div style><font color="#222222" face="arial, sans-serif"><br></font></div><div style>Best regards, </div><div style><br clear="all"><div>---------------------------------</div><div>Carlos Eduardo Ribas</div></div></div>
<div><br clear="all"><div><br></div><br><div class="gmail_quote">2012/4/5 Mark Andrews <span dir="ltr"><<a href="mailto:marka@isc.org">marka@isc.org</a>></span><br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<br>
In message <<a href="mailto:CAGdn3FE22-RH0GCP3soYM5D2SnyKEX7_M7fdHj_kdE00y9UyPw@mail.gmail.com">CAGdn3FE22-RH0GCP3soYM5D2SnyKEX7_M7fdHj_kdE00y9UyPw@mail.gmail.com</a>><br>
<div class="im">, Carlos Ribas writes:<br>
> Hello,<br>
><br>
> I'm sending this message to see if I understood the meaning of " RFC<br>
> 1918 response from Internet" message logs. I read the FAQ of Bind [1], but<br>
> I have to be honest to say that I'm a litlle bit confused, since English is<br>
> not my first language.<br>
><br>
> I'm using Bind 9.7.3 in a Debian server. It has a arquive named<br>
> zones.rfc1918 [2] that is enabled. I just took off the line refering to<br>
> 10.0.0.0 network because I'm using it in my organization. I have the<br>
> reverse configured for my network, eg: 1.0.10.in-addr.arpa, but I dont have<br>
> the reverse for the rest of this network.<br>
<br>
</div>Add a 10.in-addr.arpa zone to your configuration that delegates<br>
1.0.10.in-addr.arpa. This will catch any leaks.<br>
<br>
$TTL 3600<br>
@ SOA <a href="http://ns1.example.net" target="_blank">ns1.example.net</a>. <a href="http://hostmaster.example.net" target="_blank">hostmaster.example.net</a> 1 3600 1200 2419200 3600<br>
@ NS <a href="http://ns1.example.net" target="_blank">ns1.example.net</a>.<br>
@ NS <a href="http://ns2.example.net" target="_blank">ns2.example.net</a>.<br>
1.0 NS <a href="http://ns1.example.net" target="_blank">ns1.example.net</a>.<br>
1.0 NS <a href="http://ns2.example.net" target="_blank">ns2.example.net</a>.<br>
<div><div class="h5"><br>
> If, by mistake or not, a client asks for a address in the 10.0.2.0<br>
> network, my server will querying the Internet's name servers for this<br>
> address once I dont have it configured and then I will receive message logs<br>
> about it [3]. Is that correct?<br>
><br>
> [1] - <a href="http://www.bind9.net/BIND-FAQ" target="_blank">http://www.bind9.net/BIND-FAQ</a><br>
><br>
> [2] - zones.rfc1918 arquive:<br>
> zone "16.172.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };<br>
> zone "17.172.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };<br>
> zone "18.172.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };<br>
> zone "19.172.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };<br>
> zone "20.172.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };<br>
> zone "21.172.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };<br>
> zone "22.172.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };<br>
> zone "23.172.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };<br>
> zone "24.172.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };<br>
> zone "25.172.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };<br>
> zone "26.172.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };<br>
> zone "27.172.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };<br>
> zone "28.172.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };<br>
> zone "29.172.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };<br>
> zone "30.172.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };<br>
> zone "31.172.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };<br>
><br>
> zone "168.192.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };<br>
><br>
> [3] Message logs:<br>
> 04-Apr-2012 18:15:25.099 security: client 10.0.1.13#47738: view internal:<br>
> RFC 1918 response from Internet for 50.2.0.10.in-addr.arpa<br>
> 04-Apr-2012 18:21:09.245 security: client 10.0.1.13#42000: view internal:<br>
> RFC 1918 response from Internet for 50.2.0.10.in-addr.arpa<br>
><br>
><br>
> Best regards,<br>
><br>
> ---------------------------------<br>
> Carlos Eduardo Ribas<br>
><br>
</div></div>> --00248c6a671a32f51404bced3fd5<br>
> Content-Type: text/html; charset=ISO-8859-1<br>
> Content-Transfer-Encoding: quoted-printable<br>
><br>
> Hello,<div><br></div><div><div>=A0 =A0 I'm sending this message to see =<br>
> if I understood the meaning of " RFC 1918 response from Internet"=<br>
> message logs. I read the FAQ of Bind [1], but I have to be honest to say t=<br>
> hat I'm a litlle bit confused, since English is not my first language.<=<br>
> /div><br>
> <div><br></div><div>=A0 =A0 I'm using Bind 9.7.3 in a Debian server. It=<br>
> has a arquive named zones.rfc1918 [2] that is enabled. I just took off the=<br>
> line refering to 10.0.0.0 network because I'm using it in my organizat=<br>
> ion. I have the reverse configured for my network, eg: 1.0.10.in-addr.arpa,=<br>
> but I dont have the reverse for the rest of this network.</div><br>
> </div><div><br></div><div>=A0 =A0 If, by mistake or not, a client asks for =<br>
> a address in the 10.0.2.0 network, my server will querying the Internet'=<br>
> ;s name servers for this address once I dont have it configured and then I =<br>
> will receive message logs about it [3]. Is that correct?=A0</div><br>
> <div><br></div><div>[1] -=A0<a href=3D"<a href="http://www.bind9.net/BIND-FAQ" target="_blank">http://www.bind9.net/BIND-FAQ</a>">http:=<br>
> //<a href="http://www.bind9.net/BIND-FAQ" target="_blank">www.bind9.net/BIND-FAQ</a></a>=A0</div><div><br></div><div>[2] -=A0zones.rfc1=<br>
> 918 arquive:</div><div><div>zone "16.172.in-addr.arpa" =A0{ type =<br>
> master; file "/etc/bind/db.empty"; };</div><br>
> <div>zone "17.172.in-addr.arpa" =A0{ type master; file "/etc=<br>
> /bind/db.empty"; };</div><div>zone "18.172.in-addr.arpa" =A0=<br>
> { type master; file "/etc/bind/db.empty"; };</div><div>zone "=<br>
> ;19.172.in-addr.arpa" =A0{ type master; file "/etc/bind/db.empty&=<br>
> quot;; };</div><br>
> <div>zone "20.172.in-addr.arpa" =A0{ type master; file "/etc=<br>
> /bind/db.empty"; };</div><div>zone "21.172.in-addr.arpa" =A0=<br>
> { type master; file "/etc/bind/db.empty"; };</div><div>zone "=<br>
> ;22.172.in-addr.arpa" =A0{ type master; file "/etc/bind/db.empty&=<br>
> quot;; };</div><br>
> <div>zone "23.172.in-addr.arpa" =A0{ type master; file "/etc=<br>
> /bind/db.empty"; };</div><div>zone "24.172.in-addr.arpa" =A0=<br>
> { type master; file "/etc/bind/db.empty"; };</div><div>zone "=<br>
> ;25.172.in-addr.arpa" =A0{ type master; file "/etc/bind/db.empty&=<br>
> quot;; };</div><br>
> <div>zone "26.172.in-addr.arpa" =A0{ type master; file "/etc=<br>
> /bind/db.empty"; };</div><div>zone "27.172.in-addr.arpa" =A0=<br>
> { type master; file "/etc/bind/db.empty"; };</div><div>zone "=<br>
> ;28.172.in-addr.arpa" =A0{ type master; file "/etc/bind/db.empty&=<br>
> quot;; };</div><br>
> <div>zone "29.172.in-addr.arpa" =A0{ type master; file "/etc=<br>
> /bind/db.empty"; };</div><div>zone "30.172.in-addr.arpa" =A0=<br>
> { type master; file "/etc/bind/db.empty"; };</div><div>zone "=<br>
> ;31.172.in-addr.arpa" =A0{ type master; file "/etc/bind/db.empty&=<br>
> quot;; };</div><br>
> <div><br></div><div>zone "168.192.in-addr.arpa" { type master; fi=<br>
> le "/etc/bind/db.empty"; };</div></div><div><br></div><div>[3] Me=<br>
> ssage logs:</div><div><div>04-Apr-2012 18:15:25.099 security: client 10.0.1=<br>
> .13#47738: view internal: RFC 1918 response from Internet for 50.2.0.10.in-=<br>
> addr.arpa</div><br>
> <div>04-Apr-2012 18:21:09.245 security: client 10.0.1.13#42000: view intern=<br>
> al: RFC 1918 response from Internet for 50.2.0.10.in-addr.arpa</div></div><=<br>
> div><br></div><div><br></div><div><div>Best regards,</div><div><br clear=3D=<br>
> "all"><br>
> <div>---------------------------------</div><div>Carlos Eduardo Ribas</div>=<br>
> </div></div><br>
><br>
> --00248c6a671a32f51404bced3fd5--<br>
><br>
> --===============4492619599953994014==<br>
> Content-Type: text/plain; charset="us-ascii"<br>
> MIME-Version: 1.0<br>
> Content-Transfer-Encoding: 7bit<br>
> Content-Disposition: inline<br>
><br>
> _______________________________________________<br>
> Please visit <a href="https://lists.isc.org/mailman/listinfo/bind-users" target="_blank">https://lists.isc.org/mailman/listinfo/bind-users</a> to unsubscribe<br>
> from this list<br>
><br>
> bind-users mailing list<br>
> <a href="mailto:bind-users@lists.isc.org">bind-users@lists.isc.org</a><br>
> <a href="https://lists.isc.org/mailman/listinfo/bind-users" target="_blank">https://lists.isc.org/mailman/listinfo/bind-users</a><br>
> --===============4492619599953994014==--<br>
<span class="HOEnZb"><font color="#888888">--<br>
Mark Andrews, ISC<br>
1 Seymour St., Dundas Valley, NSW 2117, Australia<br>
PHONE: <a href="tel:%2B61%202%209871%204742" value="+61298714742">+61 2 9871 4742</a> INTERNET: <a href="mailto:marka@isc.org">marka@isc.org</a><br>
</font></span></blockquote></div><br></div>