<html><body><div style="color:#000; background-color:#fff; font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:16px"><div id="yui_3_16_0_1_1432317273982_6084">I think you meant to say:</div><div dir="ltr" id="yui_3_16_0_1_1432317273982_6085"> WWW and <b style="" class="" id="yui_3_16_0_1_1432317273982_5448">any other server/service --> zone db.internal</b></div><div dir="ltr" id="yui_3_16_0_1_1432317273982_6086"><span id="yui_3_16_0_1_1432317273982_6252">Otherfwise have your cogent explanation ready for the executive of your choice complains loudly "Our web site is down!!!! Our customers MUST have reliable access to our site!!!!!"</span></div><div id="yui_3_16_0_1_1432317273982_7286" dir="ltr"><br><span id="yui_3_16_0_1_1432317273982_6252"></span></div><div id="yui_3_16_0_1_1432317273982_7287" dir="ltr"><span id="yui_3_16_0_1_1432317273982_6252">(Many executives will not think to start a remote browser or use a reliable public service to check eternal DNS answers.)</span></div><div id="yui_3_16_0_1_1432317273982_7917" dir="ltr"><br><span id="yui_3_16_0_1_1432317273982_6252"></span></div><div id="yui_3_16_0_1_1432317273982_7918" dir="ltr"><span id="yui_3_16_0_1_1432317273982_6252">HTH,</span></div><div id="yui_3_16_0_1_1432317273982_8059" dir="ltr"><span id="yui_3_16_0_1_1432317273982_6252">Len</span></div> <br><div class="qtdSeparateBR"><br><br></div><div style="display: block;" class="yahoo_quoted"> <div style="font-family: HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif; font-size: 16px;"> <div style="font-family: HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif; font-size: 16px;"> <div dir="ltr"> <font size="2" face="Arial"> On Friday, May 22, 2015 7:47 AM, Elias Pereira <empbilly@gmail.com> wrote:<br> </font> </div> <br><br> <div class="y_msg_container"><div id="yiv1100043333"><div dir="ltr"><div>Hello everyone,</div><div><br></div><div>I have a doubt regarding acls and internal and external view.</div><div><br></div><div>If I have some servers and among them, one only has access part of the "external (world)" to "internal (my infrastructure)." That would be the site (www). The rest is only internal.</div><div><br></div><div>Like that:</div><div><br></div><div><div><b>www --> zone db.external</b></div><div><b>any other server/service --> zone db.internal</b></div></div><div><br></div><div><div>acl "clients" {</div><div> localhost;</div><div> <a rel="nofollow" target="_blank" onclick="return theMainWindow.showLinkWarning(this)" href="http://192.168.1.1/24">192.168.1.1/24</a>;</div><div> <a rel="nofollow" target="_blank" onclick="return theMainWindow.showLinkWarning(this)" href="http://172.16.1.1/24">172.16.1.1/24</a>;</div><div>};</div><div><br></div><div>view "internal" {</div><div> match-clients { clients; };</div><div> recursion yes;</div><div><br></div><div> zone "internal" {</div><div> type master;</div><div> file "/etc/bind/db.internal";</div><div> }; </div><div><br></div><div>};</div><div><br></div><div>view "external" {</div><div> match-clients { any; };</div><div> recursion no;</div><div> additional-from-auth no;</div><div> additional-from-cache no;</div><div><br></div><div> zone "external" {</div><div> type master;</div><div> file "/etc/bind/db.external";</div><div> };</div></div><div>};</div><div><br></div><div>Thus I should only put the site in a zone that is in the external view and the other servers on the internal view, would it?</div><div><br></div>-- <br><div class="yiv1100043333gmail_signature">Elias Pereira</div>
</div></div><br>_______________________________________________<br>Please visit <a href="https://lists.isc.org/mailman/listinfo/bind-users" target="_blank">https://lists.isc.org/mailman/listinfo/bind-users </a>to unsubscribe from this list<br><br>bind-users mailing list<br><a ymailto="mailto:bind-users@lists.isc.org" href="mailto:bind-users@lists.isc.org">bind-users@lists.isc.org</a><br><a href="https://lists.isc.org/mailman/listinfo/bind-users" target="_blank">https://lists.isc.org/mailman/listinfo/bind-users</a><br><br></div> </div> </div> </div></div></body></html>