I have some zones declared internally as forwards to another DNS, but there is a hefty amount of IP space we do not want to be forwarded in this manner for these zones. These forwards are for very specific zone declarations and I'm not certain if there even is a way to use an ACL for this.

Any help would be greatly appreciated.

Edit, here's an example using example.com:

acl "forwardees" {; };

zone "example.com" in { type forward; forwarders {; }; };

When doing a lookup of example.com, I would want only members of forwardees to get forwarded to If you are not a member of forwardees, I would want it to be as if that zone entry doesn't exist and a recursive should be done.

Hopefully that spells it out better than I could word it myself.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.