Thanks for your response, Hauke<br><br><div class="gmail_quote">On Thu, Feb 21, 2013 at 9:10 PM, Hauke Lampe <span dir="ltr"><<a href="mailto:lampe@hauke-lampe.de" target="_blank">lampe@hauke-lampe.de</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">On 21.02.2013 19:20, Nikita Koshikov wrote:<br>
<br>
I haven't tested this in detail but here's what I would try:<div class="im"><br>
<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
I'm trying to "cut" /24 network from the scope of /8 network, here is<br>
example:<br>
<br>
zone "11.2.10.in-addr.arpa" {<br>
type forward;<br>
forwarders { 192.168.1.23; 192.168.1.24; };<br>
};<br>
<br>
zone "10.in-addr.arpa" {<br>
type master;<br>
file "master/int/10.in-addr.arpa";<br>
};<br>
<br>
</blockquote>
<br></div>
The local authoritative data takes precedence over a forward zone.<div class="im"><br>
<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
10.in-addr.arpa is just a file that returns NXDOMAIN for any <a href="http://10.0.0.0/8" target="_blank">10.0.0.0/8</a> ip<br>
address. But I need to forward requests for <a href="http://10.2.11.0/24" target="_blank">10.2.11.0/24</a> net to other dns<br>
servers and the above config not working.<br>
</blockquote>
<br></div>
The easiest way might be to delegate the subdomain with a static-stub:<br>
<br>
zone "11.2.10.in-addr.arpa" {<br>
type static-stub;<br>
server-addresses { 192.168.1.23; 192.168.1.24; };<div class="im"><br>
};<br>
<br>
zone "10.in-addr.arpa" {<br>
type master;<br>
file "master/int/10.in-addr.arpa";<br>
};<br>
<br></div>
This is a "synthetic" delegation. There could be a problem if a client queries 2.10.in-addr.arpa. The NXDOMAIN response (instead of nodata) can be interpreted as "*.2.10.in-addr.arpa. doesn't exist". A "real" delegation in the zone file is probably better.<br>
<br>
If your version of BIND is older than 9.8, you could try to move the master zone into a view and configure 10.in-addr.arpa as another forward zone in the client's view.<span class="HOEnZb"><font color="#888888"><br>
<br></font></span></blockquote><div>Bind here is 9.3.6, so no static-stub is avaliable. Can you give simple exmaple of view for this scenario ? I already have split dns on this machine, it look like:<br><br>acl internals {<br>
{}; //for correct syntax comments resolution<br> <a href="http://10.0.0.0/8">10.0.0.0/8</a>; //Servica lan<br> <a href="http://192.168.0.0/16">192.168.0.0/16</a>;<br>
};<br>view "internal" {<br> match-clients { internals; };<br> allow-transfer { internals; };<br> recursion yes;<br><br>// here 10/8 net<br>}<br><br> <br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<span class="HOEnZb"><font color="#888888">
<br>
Hauke.</font></span><div class="HOEnZb"><div class="h5"><br>
<br>
______________________________<u></u>_________________<br>
Please visit <a href="https://lists.isc.org/mailman/listinfo/bind-users" target="_blank">https://lists.isc.org/mailman/<u></u>listinfo/bind-users</a> to unsubscribe from this list<br>
<br>
bind-users mailing list<br>
<a href="mailto:bind-users@lists.isc.org" target="_blank">bind-users@lists.isc.org</a><br>
<a href="https://lists.isc.org/mailman/listinfo/bind-users" target="_blank">https://lists.isc.org/mailman/<u></u>listinfo/bind-users</a><br>
</div></div></blockquote></div><br>