<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none;"><!-- P {margin-top:0;margin-bottom:0;} --></style>
</head>
<body dir="ltr">
<div id="divtagdefaultwrapper" style="font-size:12pt;color:#000000;font-family:Calibri,Arial,Helvetica,sans-serif;" dir="ltr">
<p>Hi, let me to say that is a bit strange what you say. If you mean a NAT many to 1 can't be reached in reverse way but "many" can only exit and receive reply packets for esthabilished session or udp related packet</p>
<p><br>
</p>
<p>if you mean for example an application server that give as output different web content reading the name after domain name , is possible but ever is one server and not many to 1</p>
<p><br>
</p>
<p>if you mean that several nets are shared to one single IP address (NAT) , no, you can only know the IP of application or appliance that perform NAT . You can't know MAC or IP after a NAT (NAT is even a route action that encapsulate IP packet inside another
IEEE 802.2 packet with the MAC address from who perform the NAT (extrnal interface)</p>
<p><br>
</p>
<p>over it in all case, bind can log QUERIES , check CHANNELS for LOG action inside BIND documentation</p>
<p><br>
</p>
<p>you can log DNS queries but is so a large log file (as network accounting, can't be live for "too much".</p>
<p><br>
</p>
<p><br>
</p>
<p>Alberto Colosi</p>
<p>IT NetWork & Security Architect Engineer</p>
<p><br>
</p>
<br>
<br>
<div style="color: rgb(0, 0, 0);">
<div>
<hr tabindex="-1" style="display:inline-block; width:98%">
<div id="x_divRplyFwdMsg" dir="ltr"><font style="font-size:11pt" face="Calibri, sans-serif" color="#000000"><b>From:</b> bind-users <bind-users-bounces@lists.isc.org> on behalf of Job <Job@colliniconsulting.it><br>
<b>Sent:</b> Tuesday, February 28, 2017 2:35 PM<br>
<b>To:</b> bind-users@lists.isc.org<br>
<b>Subject:</b> Recognizing remote IP in shared connections</font>
<div> </div>
</div>
</div>
<font size="2"><span style="font-size:10pt;">
<div class="PlainText">Hi,<br>
<br>
for policies purpuose, we need to know which remote site is resolving a Bind 9.x public DNS Server.<br>
The problem occurs when some carriers "share" the same IP address between more customers and they surf behind a shared NAT.<br>
<br>
Is there a way? Perhaps with DNS crypt o dnssec?<br>
<br>
Thank you!<br>
/F<br>
_______________________________________________<br>
Please visit <a href="https://lists.isc.org/mailman/listinfo/bind-users" id="LPlnk358181" previewremoved="true">
https://lists.isc.org/mailman/listinfo/bind-users</a> to unsubscribe from this list
<div id="LPBorder_GT_14882899072940.022263200285633" style="margin-bottom: 20px; overflow: auto; width: 100%; text-indent: 0px;">
<table id="LPContainer_14882899072900.5820020476845285" style="width: 90%; background-color: rgb(255, 255, 255); position: relative; overflow: auto; padding-top: 20px; padding-bottom: 20px; margin-top: 20px; border-top: 1px dotted rgb(200, 200, 200); border-bottom: 1px dotted rgb(200, 200, 200);" cellspacing="0">
<tbody>
<tr style="border-spacing: 0px;" valign="top">
<td id="TextCell_14882899072910.7609654271281763" style="vertical-align: top; position: relative; padding: 0px; display: table-cell;" colspan="2">
<div id="LPRemovePreviewContainer_14882899072910.15673714581003406"></div>
<div id="LPTitle_14882899072910.3565722273063414" style="top: 0px; color: rgb(0, 120, 215); font-weight: 400; font-size: 21px; font-family: "wf_segoe-ui_light","Segoe UI Light","Segoe WP Light","Segoe UI","Segoe WP",Tahoma,Arial,sans-serif; line-height: 21px;">
<a id="LPUrlAnchor_14882899072920.6707403532767269" style="text-decoration: none;" href="https://lists.isc.org/mailman/listinfo/bind-users" target="_blank">bind-users Info Page - Internet Systems Consortium</a></div>
<div id="LPMetadata_14882899072930.9237122984370715" style="margin: 10px 0px 16px; color: rgb(102, 102, 102); font-weight: 400; font-family: "wf_segoe-ui_normal","Segoe UI","Segoe WP",Tahoma,Arial,sans-serif; font-size: 14px; line-height: 14px;">
lists.isc.org</div>
<div id="LPDescription_14882899072930.1078069253618823" style="display: block; color: rgb(102, 102, 102); font-weight: 400; font-family: "wf_segoe-ui_normal","Segoe UI","Segoe WP",Tahoma,Arial,sans-serif; font-size: 14px; line-height: 20px; max-height: 100px; overflow: hidden;">
To see the collection of prior postings to the list, visit the bind-users Archives. Using bind-users: To post a message to all the list members, send ...</div>
</td>
</tr>
</tbody>
</table>
</div>
<br>
<br>
bind-users mailing list<br>
bind-users@lists.isc.org<br>
<a href="https://lists.isc.org/mailman/listinfo/bind-users" id="LPlnk569115" previewremoved="true">https://lists.isc.org/mailman/listinfo/bind-users</a>
<div id="LPBorder_GT_14882899651730.19555578933039963" style="margin-bottom: 20px; overflow: auto; width: 100%; text-indent: 0px;">
<table id="LPContainer_14882899651670.6016009814167622" style="width: 90%; background-color: rgb(255, 255, 255); position: relative; overflow: auto; padding-top: 20px; padding-bottom: 20px; margin-top: 20px; border-top: 1px dotted rgb(200, 200, 200); border-bottom: 1px dotted rgb(200, 200, 200);" cellspacing="0">
<tbody>
<tr style="border-spacing: 0px;" valign="top">
<td id="TextCell_14882899651680.7556478226465351" style="vertical-align: top; position: relative; padding: 0px; display: table-cell;" colspan="2">
<div id="LPRemovePreviewContainer_14882899651690.8339555434338709"></div>
<div id="LPTitle_14882899651690.4483764488782237" style="top: 0px; color: rgb(0, 120, 215); font-weight: 400; font-size: 21px; font-family: "wf_segoe-ui_light","Segoe UI Light","Segoe WP Light","Segoe UI","Segoe WP",Tahoma,Arial,sans-serif; line-height: 21px;">
<a id="LPUrlAnchor_14882899651700.32165335970960796" style="text-decoration: none;" href="https://lists.isc.org/mailman/listinfo/bind-users" target="_blank">bind-users Info Page - Internet Systems Consortium</a></div>
<div id="LPMetadata_14882899651710.708680683718709" style="margin: 10px 0px 16px; color: rgb(102, 102, 102); font-weight: 400; font-family: "wf_segoe-ui_normal","Segoe UI","Segoe WP",Tahoma,Arial,sans-serif; font-size: 14px; line-height: 14px;">
lists.isc.org</div>
<div id="LPDescription_14882899651720.36907720290682" style="display: block; color: rgb(102, 102, 102); font-weight: 400; font-family: "wf_segoe-ui_normal","Segoe UI","Segoe WP",Tahoma,Arial,sans-serif; font-size: 14px; line-height: 20px; max-height: 100px; overflow: hidden;">
To see the collection of prior postings to the list, visit the bind-users Archives. Using bind-users: To post a message to all the list members, send ...</div>
</td>
</tr>
</tbody>
</table>
</div>
<br>
</div>
</span></font></div>
</div>
</body>
</html>