Re: Hardening named.conf

2004-01-29 Thread Konstantin
hi, try this tutorial, I think it's the right for you: http://mail-abuse.org/rbl/usage.html#DNSuse Greetz Konstantin On Wed, 28 Jan 2004 22:11:16 + Dale Amon <[EMAIL PROTECTED]> wrote: > I've finally been annoyed enough by spammer hits on > my DNS that I've pulled out the BOG for the

Re: Hardening named.conf

2004-01-29 Thread Konstantin
hi, try this tutorial, I think it's the right for you: http://mail-abuse.org/rbl/usage.html#DNSuse Greetz Konstantin On Wed, 28 Jan 2004 22:11:16 + Dale Amon <[EMAIL PROTECTED]> wrote: > I've finally been annoyed enough by spammer hits on > my DNS that I've pulled out the BOG for the

Re: Hardening named.conf

2004-01-29 Thread Devin L. Ganger
On Wed, 28 Jan 2004 23:20:26 +0100, Dale Amon <[EMAIL PROTECTED]> wrote: > What I'd like to accomplish is the following: > > * allow-query for a specific list of addresses > to use the server for their dns resolution. > > * allow-query to the universe for zones >

Re: Hardening named.conf

2004-01-29 Thread Devin L. Ganger
On Wed, 28 Jan 2004 23:20:26 +0100, Dale Amon <[EMAIL PROTECTED]> wrote: > What I'd like to accomplish is the following: > > * allow-query for a specific list of addresses > to use the server for their dns resolution. > > * allow-query to the universe for zones >

Re: Hardening named.conf

2004-01-28 Thread Dale Amon
Things don't seem to be working quite as expected. I have something like this now: acl mydomain { localhost; 192.168.0.0/24; 10.1.1.0/24; }; There are many etho:n and I tried it with each ip specified individually, then added the localhost key word in addtion. options

Re: Hardening named.conf

2004-01-28 Thread Alvin Oga
On Wed, 28 Jan 2004, Dale Amon wrote: > I've finally been annoyed enough by spammer hits on > my DNS that I've pulled out the BOG for the first time > in several years. > > What I'd like to accomplish is the following: > > * allow-query for a specific list of addresses > to use t

Re: Hardening named.conf

2004-01-28 Thread Dale Amon
Things don't seem to be working quite as expected. I have something like this now: acl mydomain { localhost; 192.168.0.0/24; 10.1.1.0/24; }; There are many etho:n and I tried it with each ip specified individually, then added the localhost key word in addtion. options

Re: Hardening named.conf

2004-01-28 Thread Alvin Oga
On Wed, 28 Jan 2004, Dale Amon wrote: > I've finally been annoyed enough by spammer hits on > my DNS that I've pulled out the BOG for the first time > in several years. > > What I'd like to accomplish is the following: > > * allow-query for a specific list of addresses > to use t

Re: Hardening named.conf

2004-01-28 Thread Henrique de Moraes Holschuh
On Wed, 28 Jan 2004, Mark Ferlatte wrote: > options { > allow-recursion { > mydomain; > }; > }; > > This allows hosts in the mydomain acl to make recursive DNS queries, and > blocks > recursion for everyone else. Recursion is what allows bind to respond to > requests fo

Re: Hardening named.conf

2004-01-28 Thread Henrique de Moraes Holschuh
On Wed, 28 Jan 2004, Mark Ferlatte wrote: > options { > allow-recursion { > mydomain; > }; > }; > > This allows hosts in the mydomain acl to make recursive DNS queries, and blocks > recursion for everyone else. Recursion is what allows bind to respond to > requests for z

Re: Hardening named.conf

2004-01-28 Thread Mark Ferlatte
Dale Amon said on Wed, Jan 28, 2004 at 10:11:16PM +: > I've finally been annoyed enough by spammer hits on > my DNS that I've pulled out the BOG for the first time > in several years. > > What I'd like to accomplish is the following: > > * allow-query for a specific list of addresses >

Hardening named.conf

2004-01-28 Thread Dale Amon
I've finally been annoyed enough by spammer hits on my DNS that I've pulled out the BOG for the first time in several years. What I'd like to accomplish is the following: * allow-query for a specific list of addresses to use the server for their dns resolution. * allow-

Re: Hardening named.conf

2004-01-28 Thread Mark Ferlatte
Dale Amon said on Wed, Jan 28, 2004 at 10:11:16PM +: > I've finally been annoyed enough by spammer hits on > my DNS that I've pulled out the BOG for the first time > in several years. > > What I'd like to accomplish is the following: > > * allow-query for a specific list of addresses >

Hardening named.conf

2004-01-28 Thread Dale Amon
I've finally been annoyed enough by spammer hits on my DNS that I've pulled out the BOG for the first time in several years. What I'd like to accomplish is the following: * allow-query for a specific list of addresses to use the server for their dns resolution. * allow-