Blocking DNS addresses from general use

[Mike Sheldon]

(BIND 8 specific)
In the global options, or in the specific zone settings, add:

allow-query { address_list;};

like this:

options {
	directory "/usr/local/named";
	allow-query { 192.168.0.0/16; };
};

or

zone "myzone.com" {
	type master;
	file "myzone.com.db";
	allow-query { 192.168.0.0/16; };
};

Michael J. Sheldon
Internet Applications Developer
Phone: 480.699.1084
http://www.desertraven.com/
PGP Key Available on Request

-----Original Message-----
From: plug-discuss-admin@lists.PLUG.phoenix.az.us
[mailto:plug-discuss-admin@lists.PLUG.phoenix.az.us]On Behalf Of Stephen
Smith
Sent: Monday, March 20, 2000 11:06
To: Phoenix Linux User Group - Discussions
Subject: Blocking DNS addresses from general use


I want to accept DNS server use from a range of IP addresses.  How do I do
that?

I tried using IPChains - accepting from certain subnets and denying everyone
else.
But that blocked the lookups from the other servers.

Stephen

_______________________________________________
Plug-discuss mailing list  -  Plug-discuss@lists.PLUG.phoenix.az.us
http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss