On Feb 8, 2011, at 5:17 PM, Mark Andrews wrote: > > In message <3ad9c812-cba3-4dcd-a27e-26e63d912...@beth.k12.pa.us>, donovan > jeffr > ey j writes: >> Greetings >> >> I have an external dns server that serves a group of systems. One of the syst >> ems has a secondary interface with private address space. Dns should not be r >> equesting from here but i am seeing these warnings coming from my external sy >> stem; >> >> security: warning: client 209.96.96.108#49534: view com.basd.DNS.public: RFC >> 1918 response from Internet for 108.1.135.10.in-addr.arpa >> >> >> how do I keep that internal zone from being seen ? Do I have to firewall dns >> queries between interfaces on the server ? >> tia > > Please go read the FAQ. http://www.isc.org/software/bind/faq
thanks mark, It appears my case may be a programming error from the server admin. But this brings up the case of views. on my external dns server i should add an empty zone file ? what does that send back to the offending request? zone "10.IN-ADDR.ARPA" { type master; file "empty"; }; is there a way i can redirect him back to the Internal dns server for 1918 requests,... ( and i think the answer is ,.. let the internal answer the initial request so it never comes up to the outside). -j _______________________________________________ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users