RE: Bind cache availability...

"Ugo Bellavance" <[email protected]>
Newsgroups gmane.comp.security.linux
Message-ID <[email protected]>
John Madden wrote:
>>  I'm running Woody distribution of Debian Linux on one of my servers
>> and I use it as DNS sever - bind installed on it...
>> The DNS server is available to LAN users as same as to internet
>> users... For nonexistent records I use hint zone instead of
>> forwarding to my provider...this means, I use cacheing of records
>> from root servers...and that's the problem...records in my cache are
>> available to internet and LAN users, which I don't want for security
>> reasons...I would like them to be available only to my LAN users. Is
>> it at least possible...? 
> 
> Yes.  Set up an acl containing your IP blocks, then set up two
> separate "view" groups and use "match-clients" to filter down the
> list of IP's that are matched into each view.  For the external
> clients, set "recursion no." 
> 
> John

What version of bind are you running Draq?
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.