Blocking DNS addresses from general use

(BIND 8 specific)
In the global options, or in the specific zone settings, add:

allow-query { address_list;};

like this:

options {
    directory "/usr/local/named";
    allow-query { 192.168.0.0/16; };
};

or

zone "myzone.com" {
    type master;
    file "myzone.com.db";
    allow-query { 192.168.0.0/16; };
};

Michael J. Sheldon
Internet Applications Developer
Phone: 480.699.1084
http://www.desertraven.com/
PGP Key Available on Request

-----Original Message-----
From: plug-discuss-admin@lists.PLUG.phoenix.az.us
[mailto:plug-discuss-admin@lists.PLUG.phoenix.az.us]On Behalf Of Stephen
Smith
Sent: Monday, March 20, 2000 11:06
To: Phoenix Linux User Group - Discussions
Subject: Blocking DNS addresses from general use


I want to accept DNS server use from a range of IP addresses. How do I do
that?

I tried using IPChains - accepting from certain subnets and denying everyone
else.
But that blocked the lookups from the other servers.

Stephen

_______________________________________________
Plug-discuss mailing list - Plug-discuss@lists.PLUG.phoenix.az.us
http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss