<div dir="ltr">I've already posted a solution for this. Basically, "Define root zone. Delegate <a href="http://teamviewer.com/" target="_blank">teamviewer.com</a> from root zone. Define <a href="http://teamviewer.com/" target="_blank">teamviewer.com</a> as 'type forward'".<div><br></div><div>"Recursion yes" is implied. No views necessary. It doesn't make any sense anyway, to have the same match-clients list for all of one's views, since the first one matched is the one that's used.<br><div><br></div><div>Did you not see my response, or did you perhaps dislike the approach I suggested?</div><div><br></div><div>There was some subsequent discussion about not relying on DNS resolution as one's *only* control over what sites one's clients can or cannot access. While I agree with that, my position is that there's nothing wrong with controlling DNS resolution, in addition to other controls.</div><div><br></div><div>                                              - Kevin</div></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Mon, Feb 18, 2019 at 10:44 AM Roberto Carna <<a href="mailto:robertocarna36@gmail.com">robertocarna36@gmail.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr"><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-"><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-block gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-ltr">Dear I've implemented two views, one for local resolution and the other for forward a public zone to our resolver.</div></div><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-"><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-block gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-ltr"><br></div></div><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-"><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-block gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-ltr">But now I have a problem:</div></div><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-"><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-block gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-ltr"><br></div></div><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-"><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-block gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-ltr">If I define the same clients for the local zone view and forward view, depending on the order of the views the client can resolve or not the query. In this case client <a class="gmail-m_4977081989026992211m_-2462021439052017881gmail-s18magzr-0 gmail-m_4977081989026992211m_-2462021439052017881gmail-lDmhO" href="https://10.12.1.1" target="_blank">10.12.1.1</a> will match view INT and not view EXT:</div></div><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-"><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-block gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-ltr"><br></div></div><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-"><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-block gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-ltr">acl internal {  <a class="gmail-m_4977081989026992211m_-2462021439052017881gmail-s18magzr-0 gmail-m_4977081989026992211m_-2462021439052017881gmail-lDmhO" href="https://10.12.1.4" target="_blank">10.12.1.</a>1; };</div></div><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-"><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-block gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-ltr">acl external { <a class="gmail-m_4977081989026992211m_-2462021439052017881gmail-s18magzr-0 gmail-m_4977081989026992211m_-2462021439052017881gmail-lDmhO" href="https://10.12.1.1" target="_blank">10.12.1.1</a>; };</div></div><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-"><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-block gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-ltr"><br></div></div><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-"><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-block gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-ltr">view "INT" {</div></div><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-"><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-block gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-ltr">   match-clients { internal; };</div></div><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-"><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-block gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-ltr">recursion no;</div></div><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-"><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-block gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-ltr">zone "<a href="http://company.com" target="_blank">company.com</a>" {</div></div><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-"><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-block gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-ltr">    type master;</div></div><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-"><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-block gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-ltr">    file "/etc/bind/zones/company.com.db";</div></div><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-"><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-block gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-ltr">};</div></div><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-"><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-block gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-ltr"><br></div></div><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-"><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-block gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-ltr">view "EXT" {</div></div><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-"><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-block gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-ltr">   match-clients { external; };</div></div><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-"><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-block gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-ltr">recursion yes;</div></div><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-"><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-block gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-ltr"> </div></div><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-"><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-block gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-ltr">zone "<a class="gmail-m_4977081989026992211m_-2462021439052017881gmail-s18magzr-0 gmail-m_4977081989026992211m_-2462021439052017881gmail-lDmhO" href="https://teamviewer.com" target="_blank">teamviewer.com</a>" {</div></div><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-"><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-block gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-ltr">        type forward;</div></div><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-"><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-block gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-ltr">        forward only;</div></div><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-"><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-block gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-ltr">        forwarders {</div></div><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-"><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-block gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-ltr">                      <a class="gmail-m_4977081989026992211m_-2462021439052017881gmail-s18magzr-0 gmail-m_4977081989026992211m_-2462021439052017881gmail-lDmhO" href="https://172.17.10.25" target="_blank">172.1</a>8.1.1;</div></div><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-"><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-block gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-ltr">      };</div></div><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-"><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-block gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-ltr">};</div></div><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-"><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-block gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-ltr"><br></div><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-block gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-ltr"><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-"><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-block gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-ltr">If I define just one view with local and forward zones, I have to define "recursion yes" because the forward zone need this option, but in this case a query for a local zone is trying to be resolved against ROOT Servers and finally against master zone but it takes some seconds:</div></div><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-"><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-block gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-ltr"><br></div></div><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-"><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-block gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-ltr">acl unique { <a class="gmail-m_4977081989026992211m_-2462021439052017881gmail-s18magzr-0 gmail-m_4977081989026992211m_-2462021439052017881gmail-lDmhO" href="https://10.12.1.4/" target="_blank">10.12.1.</a>1; };</div></div><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-"><br class="gmail-m_4977081989026992211m_-2462021439052017881gmail-Apple-interchange-newline"></div></div><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-block gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-ltr"><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-"><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-block gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-ltr">view "INT-EXT" {</div></div><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-"><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-block gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-ltr">match-clients { unique; };</div></div><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-"><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-block gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-ltr">recursion yes;</div></div><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-"><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-block gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-ltr">zone "<a href="http://company.com" target="_blank">company.com</a>" {<br></div></div><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-"><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-block gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-ltr">type master;</div></div><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-"><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-block gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-ltr">file "/etc/bind/zones/company.com.db";</div></div><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-"><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-block gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-ltr">};</div></div><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-"><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-block gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-ltr">zone "<a class="gmail-m_4977081989026992211m_-2462021439052017881gmail-s18magzr-0 gmail-m_4977081989026992211m_-2462021439052017881gmail-lDmhO" href="https://teamviewer.com/" target="_blank">teamviewer.com</a>" {<br></div></div><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-"><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-block gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-ltr">type forward;</div></div><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-"><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-block gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-ltr">forward only;</div></div><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-"><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-block gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-ltr">forwarders {</div></div><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-"><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-block gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-ltr"><a class="gmail-m_4977081989026992211m_-2462021439052017881gmail-s18magzr-0 gmail-m_4977081989026992211m_-2462021439052017881gmail-lDmhO" href="https://172.17.10.25/" target="_blank">172.1</a>8.1.1;</div></div><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-"><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-block gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-ltr">};</div></div><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-"><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-block gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-ltr">};</div></div><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-"><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-block gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-ltr"><br></div><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-block gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-ltr"><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-"><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-block gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-ltr">How can I define same clients to try resolving first view and -if there is no response- they try with second view ???<br></div><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-block gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-ltr"><br></div><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-block gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-ltr">Or is there any other way to do what I want?</div></div></div></div></div></div><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-"><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-block gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-ltr"><br></div></div><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-"><div class="gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-block gmail-m_4977081989026992211m_-2462021439052017881gmail-public-DraftStyleDefault-ltr">Regards<br></div></div></div>
_______________________________________________<br>
Please visit <a href="https://lists.isc.org/mailman/listinfo/bind-users" rel="noreferrer" target="_blank">https://lists.isc.org/mailman/listinfo/bind-users</a> to unsubscribe from this list<br>
<br>
bind-users mailing list<br>
<a href="mailto:bind-users@lists.isc.org" target="_blank">bind-users@lists.isc.org</a><br>
<a href="https://lists.isc.org/mailman/listinfo/bind-users" rel="noreferrer" target="_blank">https://lists.isc.org/mailman/listinfo/bind-users</a><br>
</blockquote></div>