dev_n...@zoho.com wrote:
Hello,

I want to config a named for two networks, using the view.
for example, neta is for internal users, netb is for any other users.
I got the named.conf below, do you have any suggestion on it? thanks.


options {
      directory "/usr/local/bind";
      recursion no;
      zone-statistics yes;
      statistics-file "/usr/local/bind/var/named.stats";
};

view "neta" {
      match-clients { someip; };

      zone "test.a.com" {
           type master;
           file "/usr/local/bind/etc/test.a.com.neta.db";
      };
};

view "netb" {
      match-clients { any; };

      zone "test.a.com" {
           type master;
           file "/usr/local/bind/etc/test.a.com.netb.db";
      };
};

key "rndc-key" {
      algorithm hmac-md5;
      secret "*****************";
};
controls {
      inet 127.0.0.1 port 953
              allow { 127.0.0.1; } keys { "rndc-key"; };
};
That's the general idea, yes, but "someip" can't be used literally unless it's defined as an ACL somewhere else in the config, of course, and "recursion no" in "options" means that *neither* of these views can be used for your own clients (including perhaps the nameserver itself) to resolve any names outside of the test.a.com zone.

- Kevin

_______________________________________________
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Reply via email to