On Apr 19, 2009, at 11:55 PM, Ken Lai wrote:
let's take an example. my DNS server called SrvA, the outer DNS server
called SrvB.

normally, the client sent the query to SrvA, and SrvA forwards it to
SrvB. and SrvA return a result which came from SrvB to the client.
unfortunately the SrvB sometimes will return a A record that is a
advertisement site ip to SrvA. so i dont want to respond  to client if
the returned IP address is the Advertisement site address.

filter the domain name may not be suitable.

You're better off setting up an HTTP proxy that will filter out the bad requests. If you can't filter it by domain name, then DNS-based filtering is not the answer.

Chris Buxton
Professional Services
Men & Mice

_______________________________________________
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Reply via email to