Date: Thu, 22 May 2008 08:13:03 -0400 From: Steve Bertrand <iaccounts@ibctech.ca> To: Matthew Seaman <m.seaman@infracaninophile.co.uk> Cc: freebsd-questions@freebsd.org, Jonathan Chen <jonc@chen.org.nz> Subject: Re: Multiple instances of BIND at startup Message-ID: <4835634F.6060107@ibctech.ca> In-Reply-To: <483503AD.60801@infracaninophile.co.uk> References: <48345138.8080507@ibctech.ca> <4834599A.1090108@infracaninophile.co.uk> <4834A7B4.9030302@ibctech.ca> <20080521232319.GA57359@osiris.chen.org.nz> <4834B7EE.3000002@ibctech.ca> <20080522020619.GA69543@osiris.chen.org.nz> <4834D891.6050707@ibctech.ca> <20080522035913.GA78449@osiris.chen.org.nz> <483503AD.60801@infracaninophile.co.uk>
next in thread | previous in thread | raw e-mail | index | archive | help
>> The "match-destination" inspects the DNS address used by the client to >> query to determine which view to use. Would this suit your purpose? Well, yes, it would suit the purpose, but my fear was exactly that of what Matthew states below about 'leaking'. > I believe that the problem is this: even if configured to be an > authoritative server, BIND will respond to a query about zones > outside what it has authoritative data for with data from its cache > if that data is present. As there is only one cache per instance of > BIND, enabling any sort of recursive capability on a server that is > otherwise meant to be entirely authoritative can lead to data leaking > between the authoritative and recursive parts. This opens up the > possibility of tricking a server into caching false data and responding > with it as if it was authoritative. > > In answer to the OPs original question -- yes you can start two instances > of BIND given the obvious requirement that they have distinct network > addresses and ports, pid files etc. You just have to copy the startup > script to a new name and modify the variable prefix internally -- eg. > This chunk at the beginning of the script: This is exactly what I'm after. Thank you for all the help! Steve
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4835634F.6060107>