Re: Access external hosts with internal split DNS resolver

2015-08-14 Thread Lawrence K. Chen, P.Eng.
On 2015-08-09 21:41, Dave Koelmeyer wrote: Hi Josh, Heiko On 09/08/15 18:38, Heiko Richter wrote: Am 09.08.2015 um 06:58 schrieb Josh Kuo: > Add www.mydomain.co.nz to your internal zone, that is one common > way to deal with it. With BIND you can keep the common records in a > separate file a

Re: separation of authoritative and recursive functions on internal networks

2015-08-14 Thread Lawrence K. Chen, P.Eng.
On 2015-08-10 13:12, Mark Andrews wrote: Authoritative servers (listed in NS records) shouldn't be recursive. This prevents leakage of cache data. This provide consistent answers. The server also doesn't have to decide what type of answer to give (recursive vs authoritative). Glue doesn't ge

Re: configuration error in lists.isc.org

2015-08-14 Thread Lawrence K. Chen, P.Eng.
On 2015-08-13 21:14, Mark Andrews wrote: In message <94ac3fe7e1948b9c0ce80a78f8a59...@lhaven.homeip.net>, "Lawrence K. C hen, P.Eng." writes: Earlier today had a request to add another entry...didn't notice that how close the string was to 255? characters. You just use multiple fields if ther

RE: How can create in DNS BIND9 view and zones for DMZ with 3 Interfaces (eth0, eth1, eth2)

2015-08-14 Thread Darcy Kevin (FCA)
Not sure what you're trying to accomplish. Unless you're doing something complicated that requires special configuration, named will listen on all of your interfaces (which possibly you may *not* want, depending on the topology of your network and your security policies), and will use, potential

How can create in DNS BIND9 view and zones for DMZ with 3 Interfaces (eth0, eth1, eth2)

2015-08-14 Thread Int
How can create in DNS BIND9 view and zones for DMZ with 3 Interfaces (eth0, eth1, eth2) Example for: eth0:net: 172.1.1.1 eth2:DMZ: (Servers BIND9 DNS, FTP, WWW, mail) :192.168.0.1 eth1:local: 10.2.2.1 ___ Please visit https://lists.isc.org/mailman