I had forgotten that about CNAME. But you can hard-code an A record to the
nosslsearch.google.com record


We have to use this technique (we point the A record to a proxy) for
regulatory reasons to block IM connections except through our IM proxy.

----
Matthew Huff             | 1 Manhattanville Rd
Director of Operations   | Purchase, NY 10577
OTA Management LLC       | Phone: 914-460-4039
aim: matthewbhuff        | Fax:   914-460-4139


> -----Original Message-----
> From: bind-users-bounces+mhuff=ox....@lists.isc.org [mailto:bind-users-
> bounces+mhuff=ox....@lists.isc.org] On Behalf Of Alan Clegg
> Sent: Monday, April 16, 2012 9:53 AM
> To: bind-users@lists.isc.org
> Subject: Re: Configuring CNAME for nosslsearch.google.com
> 
> On 4/16/2012 9:40 AM, Matthew Huff wrote:
> > Actually, this can be done.
> >
> > Create a zone file for "www.google.com", not "google.com". The zone
> > file should like this (replace THIS_HOSTNAME with the name of your
> nameserver:
> >
> >
> > @           IN      SOA     localhost       root@localhost. (
> >                                             2012041100
> >                                             7200
> >                                             1800
> >                                             1209600
> >                                             300 )
> >
> >             IN NS THIS_HOSTNAME
> >
> >             IN CNAME nosslsearch.google.com.
> 
> Which isn't legal since you can't have a CNAME and another RR at the
> same label.
> 
> AlanC
> --
> a...@clegg.com | acl...@infoblox.com
>           1.919.355.8851

Attachment: smime.p7s
Description: S/MIME cryptographic signature

_______________________________________________
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Reply via email to