[95995] in RedHat Linux List
Stopping DNS Subdomain from going out on zone transfers?
daemon@ATHENA.MIT.EDU (Mike Blatchley)
Thu Oct 22 20:14:45 1998
Date: Thu, 22 Oct 1998 18:13:47 -0600 (MDT)
From: Mike Blatchley <mblatch@rocky.orci.com>
Reply-To: Mike Blatchley <mblatch@orci.com>
To: redhat-list@redhat.com
Resent-From: redhat-list@redhat.com
I am using my ISP for hosting our primary DNS tables, but I supply the
tables via bind-8.1.2 zone transfers. The machine that does the transfers
(firewall.ourdomain.com) is transferring the zone "ourdomain.com"
But, firewall is also a secondary/slave nameserver to an internal
protected subdomain (ourcity.ourdomain.com). In the bind-8 named.conf, I
have the subdomain's zone set up as:
zone "ourcity.ourdomain.com" {
type slave;
file "sz/db.ourcity.ourdomain.com";
masters { 10.10.10.10; };
allow-query { localhost; internal_ns; }; // only inside machines
allow-transfer { internal_ns; }; // only inside machines
};
However, in my zone file that gets transferred for ourdomain.com, I see:
ourcity IN NS internal_ns.ourcity.ourdomain.com.
$ORIGIN ourcity.ourdomain.com.
internal_ns IN A 10.10.10.10
$ORIGIN ourdomain.com.
.....
In other words, the zone file is setting itself up to forward name lookups
for that subdomain. How can I prevent that subdomain (or even hints of
it) from getting included in the zone transfer? I want the machine
providing the transfers to still be able to look up hosts in the
subdomain, and would prefer keeping a secondary copy of the subdomain on
that host as an internal secondary server.
Thanks for any assistance.
Mike
mblatch@orci.com
--
PLEASE read the Red Hat FAQ, Tips, Errata and the MAILING LIST ARCHIVES!
http://www.redhat.com http://archive.redhat.com
To unsubscribe: mail redhat-list-request@redhat.com with
"unsubscribe" as the Subject.
