-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi Alexander,
On 02/03/2012 01:57 PM, Alexander Chekalin wrote: > Hello, > > I deal with a really fuzzy problem. For some reasons we decided to > create resolver host that will only resolves soveral domains and replay > with 'nodata' to any other requests. Ok, I've set up the machine, and > set up unbound on it, then put some stub-zone's into config - works > great. Now what I need is how to stop unbound to answer for all other > requests? That is a weird configuration to decide on. > If I put > > local-zone: "." static > > in the config, no requests are answered at all, if I put it by the end > of config (so stub-zones will be parsed first) I got a configuration error. Because it must be in the server: clause, you could make a new server: clause at the end of the file, but actually, the order of statements does not have an effect here. > If there any way to do what I need? Put local-zone: "serve-this.com" transparent statements to punch holes in the "." static where resolution will proceed normally. For all of the domains where you also have stub-zones. Unbound picks the most specific local-zone and applies its policy to the query, so you can nest local-zone definitions inside other local-zones. (it also takes the most specific access-control statements, stubs and forwards, by the way). Best regards, Wouter -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.15 (GNU/Linux) Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org/ iQIcBAEBAgAGBQJPK+KvAAoJEJ9vHC1+BF+NRVkP/2v+hXd3sgXSgnI3nf+trTZW DlnBcqKzAHoS+dGm0YTNEm6zq4D4T/NmN3ajqAri3lEMhDVt3GOLaMsYOtEUNZyq 2xJrFfVDw95O3UAi1WUInL757J9/e1qIP0cevqM6OLHcSWmzFBR/GUcnoxZrz0/N e6CJM2jXQtgy4VHG4MXa4iSJ3QkspS35vzeh4mUiNfqwykTFZGXcJZ3CsM1G2lG+ ApIEXsUVmt7a94HNylrioOwRjQ7u5SwLR2ZGbEKyhk0GTaVXhkWeGPuGUf6C/hoh hW3KIBgNA5yTGnATRki2a/e0VAQScwEMIySpzWIhXAm+GxW/s+L4xndF4yqveUzu OW+/IZFhUgFlZcHQGxuWbbqT0qq6uDxa69N9kafmXSTnpWM7rAMGxenXShqpqzVd FWwvr8btQrCiXbzk1pUsJtesbw6ZnywqcJn45c++onz70XFzX4+v87FPeueVryqf IORGPakFiFZQc36NFJTD0m+axdwUz5lVwuW/ldV8uqmQSNr/34yb17n85tZMAA81 UssKajRdwqtZOoaJTPKWtEwpqx5cfJXjejmJPYLo06nh4/bDb02s5a0Qg1a60z4W N1pY41eTOxHhHZdRtpsfaI3bowCAUTBRKUN1Lra0SSrbX6C6w3a8+Fez6U+NKeRG 0/ydlKzKVXjZowA1VHUL =OTZM -----END PGP SIGNATURE----- _______________________________________________ Unbound-users mailing list [email protected] http://unbound.nlnetlabs.nl/mailman/listinfo/unbound-users
