Unix & Linux Stack Exchange is a question and answer site for users of Linux, FreeBSD and other Un*x-like operating systems. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have some zones declared internally as forwards to another DNS, but there is a hefty amount of IP space we do not want to be forwarded in this manner for these zones. These forwards are for very specific zone declarations and I'm not certain if there even is a way to use an ACL for this.

Any help would be greatly appreciated.

Edit, here's an example using example.com:

acl "forwardees" {; };

zone "example.com" in { type forward; forwarders {; }; };

When doing a lookup of example.com, I would want only members of forwardees to get forwarded to If you are not a member of forwardees, I would want it to be as if that zone entry doesn't exist and a recursive should be done.

Hopefully that spells it out better than I could word it myself.

share|improve this question
Does this cover your question? serverfault.com/questions/99101/… If not can you be more specific? – Zoredache Oct 3 '13 at 22:59
@Zoredache Not really, but I did give an example which hopefully meets the more specificity request. – Tim Winter Oct 4 '13 at 2:42
Perhaps a typical split horizon setup? cyberciti.biz/faq/linux-unix-bind9-named-configure-views – Zoredache Oct 4 '13 at 4:38

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.