-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On Tue, 2014-10-28 at 13:47 +0100, Akos Polster wrote:
> With bind, is it possible to resolve "example.com" locally, but "*.
> example.com" by forwarding?
Does your public example.com have NS records, or are you trying to force
forwarding to a name server that is not mentioned in those NS records?
If you just want to override the A record for example.com, while leaving
all other names like www.example.com to be resolved thru the normal
recursive resolution mechanisms, you could setup an RPZ zone.
Overloading the usage of example.com:
response-policy { zone "rpz.my.example.com";} qname-wait-recurse no;
zone "rpz.my.example.com" {
type master;
file "named.rpz.my.example.com";
};
Then in the named.rpz.my.example.com zone file:
example.com IN A 10.2.3.4; or whatever
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.14 (GNU/Linux)
iEYEARECAAYFAlRQI+0ACgkQL6j7milTFsGDBQCePnOeDDQxPQIMOBjxHG2AK1C9
TLMAniN9/9kxHgdX4iDfPwHNshsH11jr
=iKTN
-----END PGP SIGNATURE-----
_______________________________________________
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe
from this list
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users
