On 01/16/2017 08:17 AM, Luis Felipe Dominguez Vega wrote:
Hello, i was searching into google to find my problem, but i think that is better write to the list. I am using Bind with Samba 4 (with BIND_DLZ) serving the domain mtz.example.com, but i need resolv throw another server the querys to domain example.com and anothers subdomains (like grm.example.com, vcl.example.com), but i dont want resolve any other (to prevent DNS Tunnel). So i need enable the recursion and permit to my network that recursion, the problem is that always resolve the google.com, facebook.com, etc... and i want only resolve the names into Samba (BIND_DLZ) and all others be forwarded by my another server, files.
I don't know if it will work for you or not, but I'd try the following:Make your server slave the example.com, grm.example.com, vlc.example.com zones off of their respective servers. That way your server can authoritatively answer all the zones and not need to do any recursion.
-- Grant. . . . unix || die
smime.p7s
Description: S/MIME Cryptographic Signature
_______________________________________________ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users