dev_n...@zoho.com wrote:
Hello,
I want to config a named for two networks, using the view.
for example, neta is for internal users, netb is for any other users.
I got the named.conf below, do you have any suggestion on it? thanks.
options {
directory "/usr/local/bind";
recursion no;
zone-statistics yes;
statistics-file "/usr/local/bind/var/named.stats";
};
view "neta" {
match-clients { someip; };
zone "test.a.com" {
type master;
file "/usr/local/bind/etc/test.a.com.neta.db";
};
};
view "netb" {
match-clients { any; };
zone "test.a.com" {
type master;
file "/usr/local/bind/etc/test.a.com.netb.db";
};
};
key "rndc-key" {
algorithm hmac-md5;
secret "*****************";
};
controls {
inet 127.0.0.1 port 953
allow { 127.0.0.1; } keys { "rndc-key"; };
};
That's the general idea, yes, but "someip" can't be used literally
unless it's defined as an ACL somewhere else in the config, of course,
and "recursion no" in "options" means that *neither* of these views can
be used for your own clients (including perhaps the nameserver itself)
to resolve any names outside of the test.a.com zone.
- Kevin
_______________________________________________
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users