subject:"\[Freeipa\-users\] Split Horizon DNS config"

Re: [Freeipa-users] Split Horizon DNS config

2015-05-06 Thread Petr Spacek

On 6.5.2015 10:06, Petr Spacek wrote: General advice about views is 'do not use them' :-) It is much cleaner to put internal names in a sub-domain like int.example.com. (while example.com. is the public-facing domain) and restrict access to this sub-domain using ACL. In long term it will

[Freeipa-users] Split Horizon DNS config

2015-05-04 Thread Christoph Kaminski

Hi can someone validate this config for bind + split horizon (only the views part): acl internal { 127.0.0.1; 172.16.0.0/12; }; view internal { match-clients { internal; }; recursion yes;