Take the 2-minute tour ×
Unix & Linux Stack Exchange is a question and answer site for users of Linux, FreeBSD and other Un*x-like operating systems.. It's 100% free, no registration required.

I have some zones declared internally as forwards to another DNS, but there is a hefty amount of IP space we do not want to be forwarded in this manner for these zones. These forwards are for very specific zone declarations and I'm not certain if there even is a way to use an ACL for this.

Any help would be greatly appreciated.

Edit, here's an example using example.com:

acl "forwardees" { 10.0.0.0/8; };

zone "example.com" in { type forward; forwarders { 1.2.3.4; }; };


When doing a lookup of example.com, I would want only members of forwardees to get forwarded to 1.2.3.4. If you are not a member of forwardees, I would want it to be as if that zone entry doesn't exist and a recursive should be done.

Hopefully that spells it out better than I could word it myself.

share|improve this question
    
Does this cover your question? serverfault.com/questions/99101/… If not can you be more specific? –  Zoredache Oct 3 '13 at 22:59
    
@Zoredache Not really, but I did give an example which hopefully meets the more specificity request. –  Tim Winter Oct 4 '13 at 2:42
    
Perhaps a typical split horizon setup? cyberciti.biz/faq/linux-unix-bind9-named-configure-views –  Zoredache Oct 4 '13 at 4:38
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.