Re: Hardening named.conf

2004-01-29 Thread Devin L. Ganger
On Wed, 28 Jan 2004 23:20:26 +0100, Dale Amon [EMAIL PROTECTED] wrote: What I'd like to accomplish is the following: * allow-query for a specific list of addresses to use the server for their dns resolution. * allow-query to the universe for zones

Hardening named.conf

2004-01-28 Thread Dale Amon
I've finally been annoyed enough by spammer hits on my DNS that I've pulled out the BOG for the first time in several years. What I'd like to accomplish is the following: * allow-query for a specific list of addresses to use the server for their dns resolution. *

Re: Hardening named.conf

2004-01-28 Thread Mark Ferlatte
Dale Amon said on Wed, Jan 28, 2004 at 10:11:16PM +: I've finally been annoyed enough by spammer hits on my DNS that I've pulled out the BOG for the first time in several years. What I'd like to accomplish is the following: * allow-query for a specific list of addresses

Re: Hardening named.conf

2004-01-28 Thread Henrique de Moraes Holschuh
On Wed, 28 Jan 2004, Mark Ferlatte wrote: options { allow-recursion { mydomain; }; }; This allows hosts in the mydomain acl to make recursive DNS queries, and blocks recursion for everyone else. Recursion is what allows bind to respond to requests for zones

Re: Hardening named.conf

2004-01-28 Thread Alvin Oga
On Wed, 28 Jan 2004, Dale Amon wrote: I've finally been annoyed enough by spammer hits on my DNS that I've pulled out the BOG for the first time in several years. What I'd like to accomplish is the following: * allow-query for a specific list of addresses to use the

Re: Hardening named.conf

2004-01-28 Thread Dale Amon
Things don't seem to be working quite as expected. I have something like this now: acl mydomain { localhost; 192.168.0.0/24; 10.1.1.0/24; }; There are many etho:n and I tried it with each ip specified individually, then added the localhost key word in addtion.