On Feb 8, 2011, at 5:17 PM, Mark Andrews wrote:

> 
> In message <3ad9c812-cba3-4dcd-a27e-26e63d912...@beth.k12.pa.us>, donovan 
> jeffr
> ey j writes:
>> Greetings
>> 
>> I have an external dns server that serves a group of systems. One of the syst
>> ems has a secondary interface with private address space. Dns should not be r
>> equesting from here but i am seeing these warnings coming from my external sy
>> stem;
>> 
>> security: warning: client 209.96.96.108#49534: view com.basd.DNS.public: RFC 
>> 1918 response from Internet for 108.1.135.10.in-addr.arpa
>> 
>> 
>> how do I keep that internal zone from being seen ? Do I have to firewall dns 
>> queries between interfaces on the server ?
>> tia
> 
> Please go read the FAQ. http://www.isc.org/software/bind/faq

thanks mark,

It appears my case may be a programming error from the server admin. But this 
brings up the case of views.

on my external dns server i should add an empty zone file ? what does that send 
back to the offending request?

zone "10.IN-ADDR.ARPA" {
        type master;
        file "empty";
};

is there a way i can redirect him back to the Internal dns server for 1918 
requests,... ( and i think the answer is ,.. let the internal answer the 
initial request so it never comes up to the outside).

-j
_______________________________________________
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Reply via email to