<div dir="ltr">"type master".<div><br></div><div>It must contain the mandatory records that all zones require -- exactly 1 SOA and at least 2 NSes. You'll need some A/AAAA records to resolve the NS names into addresses. What the NSes point to is pretty much irrelevant, if all of your clients are stub resolvers and only look up leaf records (A, AAAA, MX, etc.)</div><div><br></div><div>For the <a href="http://teamviewer.com">teamviewer.com</a> delegation, you'll need at least 2 NSes, but you can point those to the same names as the apex NSes, if you wish. That would save you from having to populate more A/AAAA records in the zone.</div><div><br></div><div>If you haven't created a master file before, you might want to study up. There are a few rules that need to be followed, and certain mistakes to be avoided (although, for the root zone, the most common mistake -- failure to dot-terminate names -- tends to be a non-issue :-)</div><div><br></div><div> - Kevin</div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Wed, Feb 20, 2019 at 8:49 AM Roberto Carna <<a href="mailto:robertocarna36@gmail.com">robertocarna36@gmail.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr"><div dir="ltr">Dear Crist, sorry but I can understand at all what you say.....please I ned to ask you again:<div><br></div><div>You tell me to do this:</div><div><br></div><div>zone "." {<br> type master;<br> file "empty.db";<br>}; </div><div><br></div><div>The root zone Is "type master" or "type hint" ???<br></div><div><br></div><div>The empty.db is really an empty file with no data at all ???</div><div><br></div><div>And where do I have to put my current file:</div><div><br></div><div><div>recursion yes;<br></div><div>zone "<a href="http://teamviewer.com/" target="_blank">teamviewer.com</a>" {<br> type forward;<br> forwarders { 8.8.8.8; };<br>};</div></div><div><br></div><div>Thanks in advance, I'll be waiting for your response please.</div><div><br></div><div>Greetings!!!</div></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">El mié., 20 feb. 2019 a las 0:57, Crist Clark (<<a href="mailto:cjc%2Bbind-users@pumpky.net" target="_blank">cjc+bind-users@pumpky.net</a>>) escribió:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">You need to explicitly define the root zone. Last I knew, BIND still<br>
gets the root zone hardcoded into the executable and will try to Do<br>
the Right Thing and find the root on its own even if the administrator<br>
does not define one or provide hints.<br>
<br>
You need something like,<br>
<br>
zone "." {<br>
type master;<br>
file "empty.db";<br>
};<br>
<br>
<br>
On Tue, Feb 19, 2019 at 10:29 AM Roberto Carna <<a href="mailto:robertocarna36@gmail.com" target="_blank">robertocarna36@gmail.com</a>> wrote:<br>
><br>
> Dear Matus and Kevin, please tell me if it's OK if I do thsi:<br>
><br>
> named.conf:<br>
> include "/etc/bind/named.conf.default-zones";<br>
><br>
> named.conf.default-zones:<br>
> recursion yes;<br>
> zone "<a href="http://teamviewer.com" rel="noreferrer" target="_blank">teamviewer.com</a>" {<br>
> type forward;<br>
> forwarders { 8.8.8.8; };<br>
> };<br>
><br>
> named.conf.local:<br>
> <empty><br>
><br>
> I define "recursion yes" in named.conf.default-zones.<br>
><br>
> Thanks again, regards !!!<br>
><br>
> El mar., 19 feb. 2019 a las 15:13, Matus UHLAR - fantomas via bind-users (<<a href="mailto:bind-users@lists.isc.org" target="_blank">bind-users@lists.isc.org</a>>) escribió:<br>
>><br>
>> On 19.02.19 09:45, Roberto Carna wrote:<br>
>> >Dear Kevin, I am sorry but I didn't see your past response.<br>
>> ><br>
>> >Please can you show me with an example what you say: "Define root zone.<br>
>> >Delegate <a href="http://teamviewer.com" rel="noreferrer" target="_blank">teamviewer.com</a> from root. Define <a href="http://teamviewer.com" rel="noreferrer" target="_blank">teamviewer.com</a> as 'type forward'".<br>
>> ><br>
>> >An also what is the benefit in defining a root zone with the <a href="http://teamviewer.com" rel="noreferrer" target="_blank">teamviewer.com</a><br>
>> >delegated into it??? Because I put to work this zone just as a forward<br>
>> >zone, without a root zone definition.<br>
>><br>
>> the benefit is it does exactly what you want.<br>
>> the "<a href="http://teamviewer.com" rel="noreferrer" target="_blank">teamviewer.com</a>" zone of type forward causes DNS resolution of <a href="http://teamviewer.com" rel="noreferrer" target="_blank">teamviewer.com</a><br>
>> domain.<br>
>> the root zone effectively disables everything else (because bind thinks<br>
>> nothing else exists).<br>
>><br>
>> >El lun., 18 feb. 2019 a las 17:00, Kevin Darcy (<<a href="mailto:kevin.darcy@fcagroup.com" target="_blank">kevin.darcy@fcagroup.com</a>>)<br>
>> >escribió:<br>
>> ><br>
>> >> I've already posted a solution for this. Basically, "Define root zone.<br>
>> >> Delegate <a href="http://teamviewer.com" rel="noreferrer" target="_blank">teamviewer.com</a> from root zone. Define <a href="http://teamviewer.com" rel="noreferrer" target="_blank">teamviewer.com</a> as 'type<br>
>> >> forward'".<br>
>> >><br>
>> >> "Recursion yes" is implied. No views necessary. It doesn't make any sense<br>
>> >> anyway, to have the same match-clients list for all of one's views, since<br>
>> >> the first one matched is the one that's used.<br>
>> >><br>
>> >> Did you not see my response, or did you perhaps dislike the approach I<br>
>> >> suggested?<br>
>> >><br>
>> >> There was some subsequent discussion about not relying on DNS resolution<br>
>> >> as one's *only* control over what sites one's clients can or cannot access.<br>
>> >> While I agree with that, my position is that there's nothing wrong with<br>
>> >> controlling DNS resolution, in addition to other controls.<br>
>><br>
>> --<br>
>> Matus UHLAR - fantomas, <a href="mailto:uhlar@fantomas.sk" target="_blank">uhlar@fantomas.sk</a> ; <a href="http://www.fantomas.sk/" rel="noreferrer" target="_blank">http://www.fantomas.sk/</a><br>
>> Warning: I wish NOT to receive e-mail advertising to this address.<br>
>> Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.<br>
>> M$ Win's are shit, do not use it !<br>
>> _______________________________________________<br>
>> Please visit <a href="https://lists.isc.org/mailman/listinfo/bind-users" rel="noreferrer" target="_blank">https://lists.isc.org/mailman/listinfo/bind-users</a> to unsubscribe from this list<br>
>><br>
>> bind-users mailing list<br>
>> <a href="mailto:bind-users@lists.isc.org" target="_blank">bind-users@lists.isc.org</a><br>
>> <a href="https://lists.isc.org/mailman/listinfo/bind-users" rel="noreferrer" target="_blank">https://lists.isc.org/mailman/listinfo/bind-users</a><br>
><br>
> _______________________________________________<br>
> Please visit <a href="https://lists.isc.org/mailman/listinfo/bind-users" rel="noreferrer" target="_blank">https://lists.isc.org/mailman/listinfo/bind-users</a> to unsubscribe from this list<br>
><br>
> bind-users mailing list<br>
> <a href="mailto:bind-users@lists.isc.org" target="_blank">bind-users@lists.isc.org</a><br>
> <a href="https://lists.isc.org/mailman/listinfo/bind-users" rel="noreferrer" target="_blank">https://lists.isc.org/mailman/listinfo/bind-users</a><br>
</blockquote></div>
_______________________________________________<br>
Please visit <a href="https://lists.isc.org/mailman/listinfo/bind-users" rel="noreferrer" target="_blank">https://lists.isc.org/mailman/listinfo/bind-users</a> to unsubscribe from this list<br>
<br>
bind-users mailing list<br>
<a href="mailto:bind-users@lists.isc.org" target="_blank">bind-users@lists.isc.org</a><br>
<a href="https://lists.isc.org/mailman/listinfo/bind-users" rel="noreferrer" target="_blank">https://lists.isc.org/mailman/listinfo/bind-users</a><br>
</blockquote></div>