Skip site navigation (1)Skip section navigation (2) 
Date:      Fri, 12 Sep 2003 22:30:50 -0500
From:      robert schlotterbeck <robert@rs.tarrant.tx.us>
To:        Ronj_clark@yahoo.com, FreeBSD Questions <freebsd-questions@freebsd.org>
Subject:   Re: FreeBSD and DNS
Message-ID:  <200309122230.50438.robert@rs.tarrant.tx.us>
In-Reply-To: <20030913031152.72191.qmail@web10009.mail.yahoo.com>
References:  <20030913031152.72191.qmail@web10009.mail.yahoo.com>
next in thread | previous in thread | raw e-mail | index | archive | help 
You can use BIND's view options for this.  It would require BIND 9

Info can be found at http://sysadmin.oreilly.com/news/views_0501.html

quick sample:

acl "local-addresses" { 10.0.0.0/8; 127.0.0.1/32; };

view "internal" {
        match-clients { local-addresses; };
        recursion yes;
        zone "domain.tld" in {
                type master;
                file "domain.tld.internal";
        };
};

view "external" {
        match-clients { 0/0; };
        recursion no;
        zone "domain.tld" in {
                type master;
                file "domain.tld.external";
                masters { 66.34.148.127; };
                allow-transfer { secondary-nameservers; };
        };
};

Robert

On Friday 12 September 2003 10:11 pm, Ronnie Clark wrote:
> Hello all,
>
> I have a questions that I just cannot get my brain
> around. I have a home network and use FreeBSD as my
> firewall using IPFW. It is also my internal DNS
> server, handling name resolution for inside the
> network and passing requests to the internet. I have
> my own domain, and use a free DNS service to point to
> my static IP from the outside. But as of late, the DNS
> service has come under DOS attack. So, if I want to
> host my own DNS records, so that people on the outside
> get my static, routable internet IP address, plus my
> reverse DNS record, can I still have the DNS service
> serve my internal requests? Can you have an A record
> point to the same machine, yet list two different IP
> addresses? Or do I need to move my internal DNS to
> another system to serve the inside? Please help, brain
> in knots over this one.
>
> Thanks,
> RC
>

Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200309122230.50438.robert>