Thanks for your response, Hauke On Thu, Feb 21, 2013 at 9:10 PM, Hauke Lampe <la...@hauke-lampe.de> wrote:
> On 21.02.2013 19:20, Nikita Koshikov wrote: > > I haven't tested this in detail but here's what I would try: > > > I'm trying to "cut" /24 network from the scope of /8 network, here is >> example: >> >> zone "11.2.10.in-addr.arpa" { >> type forward; >> forwarders { 192.168.1.23; 192.168.1.24; }; >> }; >> >> zone "10.in-addr.arpa" { >> type master; >> file "master/int/10.in-addr.arpa"; >> }; >> >> > The local authoritative data takes precedence over a forward zone. > > > 10.in-addr.arpa is just a file that returns NXDOMAIN for any 10.0.0.0/8ip >> address. But I need to forward requests for 10.2.11.0/24 net to other dns >> servers and the above config not working. >> > > The easiest way might be to delegate the subdomain with a static-stub: > > zone "11.2.10.in-addr.arpa" { > type static-stub; > server-addresses { 192.168.1.23; 192.168.1.24; }; > > }; > > zone "10.in-addr.arpa" { > type master; > file "master/int/10.in-addr.arpa"; > }; > > This is a "synthetic" delegation. There could be a problem if a client > queries 2.10.in-addr.arpa. The NXDOMAIN response (instead of nodata) can be > interpreted as "*.2.10.in-addr.arpa. doesn't exist". A "real" delegation in > the zone file is probably better. > > If your version of BIND is older than 9.8, you could try to move the > master zone into a view and configure 10.in-addr.arpa as another forward > zone in the client's view. > > Bind here is 9.3.6, so no static-stub is avaliable. Can you give simple exmaple of view for this scenario ? I already have split dns on this machine, it look like: acl internals { {}; //for correct syntax comments resolution 10.0.0.0/8; //Servica lan 192.168.0.0/16; }; view "internal" { match-clients { internals; }; allow-transfer { internals; }; recursion yes; // here 10/8 net } > > Hauke. > > > ______________________________**_________________ > Please visit > https://lists.isc.org/mailman/**listinfo/bind-users<https://lists.isc.org/mailman/listinfo/bind-users>to > unsubscribe from this list > > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/**listinfo/bind-users<https://lists.isc.org/mailman/listinfo/bind-users> >
_______________________________________________ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users