Re: Bind cache availability...

Santi Saez <[email protected]>
Newsgroups gmane.comp.security.linux
Message-ID <[email protected]>
Hi,

Try putting this in your /etc/named.conf :

options {
       directory "/var/named";
       dump-file "/var/named/data/cache_dump.db";
       statistics-file "/var/named/data/named_stats.txt";

       // Santi, 16/5/2005

       allow-recursion {
             192.168.0.0/24;
       };

       allow-query {
             192.168.0.0/24;
       };

       allow-transfer {
             none;
       };
};

>         I'm running Woody distribution of Debian Linux on one of my servers and
> I use it as DNS sever - bind installed on it...
> The DNS server is available to LAN users as same as to internet users...
> For nonexistent records I use hint zone instead of forwarding to my
> provider...this means, I use cacheing of records from root servers...and
> that's the problem...records in my cache are available to internet and
> LAN users, which I don't want for security reasons...I would like them
> to be available only to my LAN users. Is it at least possible...?
> Thank you in advance...
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.