Matt Mossholder on 12 Sep 2008 04:24:25 -0700


[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

Re: [PLUG] DNS security question


----- "Neill R" <nrdevelopment@gmail.com> wrote:

> I have three client zones hosted on an internal name server. There are
> three clients using the name server for name resolution. The client's
> each have their own subnet.
> 
> ie.
> 
> client 1 - 10.10.20.0/24
> client 2 - 10.10.30.0/24
> client 3 - 10.10.40.0/24
> 
> my company name is outsource.com , each client has a domain of
> clientX.outsource.com . My question - is there a way in bind or any
> dns server that I can restrict hostx.client1.outsource.com queries to
> 10.10.20.0/24 , hostx.client2.outsource.com queries to 10.10.30.0/24 ,
> etc..
> 
> Thanks in advance,
> Neill
> 

Neill,
    The feature for you to investigate is called "Views". This allows you to virtualize DNS, such that, based on source IP, you can provide different answers. You can even provide different answers to the same query. For example, you could have mail.outsource.com be 10.10.20.10 for client 1, but 10.10.30.10 for client 2.

     --Matt Mossholder 
___________________________________________________________________________
Philadelphia Linux Users Group         --        http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug