Re: Bind cache availability...
Santi Saez <[email protected]>
| Newsgroups | gmane.comp.security.linux |
|---|---|
| Message-ID | <[email protected]> |
Hi,
Try putting this in your /etc/named.conf :
options {
directory "/var/named";
dump-file "/var/named/data/cache_dump.db";
statistics-file "/var/named/data/named_stats.txt";
// Santi, 16/5/2005
allow-recursion {
192.168.0.0/24;
};
allow-query {
192.168.0.0/24;
};
allow-transfer {
none;
};
};
> I'm running Woody distribution of Debian Linux on one of my servers and
> I use it as DNS sever - bind installed on it...
> The DNS server is available to LAN users as same as to internet users...
> For nonexistent records I use hint zone instead of forwarding to my
> provider...this means, I use cacheing of records from root servers...and
> that's the problem...records in my cache are available to internet and
> LAN users, which I don't want for security reasons...I would like them
> to be available only to my LAN users. Is it at least possible...?
> Thank you in advance...