-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 On Sat, 2017-05-27 at 09:11 +0800, Rui Mao wrote: > 1. Resolve test.a.com to 192.168.1.1
> 2. Still forward other *.a.com to outside DNS servers With bind, you have at least two choices. a) create test.a.com zone, so your server becomes authoritative for that name, and all names under it. You then control all names like *.test.a.com - queries for those won't be forwarded to the outside dns servers. b) use the bind RPZ feature to only override the test.a.com name. Other names such as *.test.a.com will still be forwarded to the outside dns servers. -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.14 (GNU/Linux) iEYEAREKAAYFAlkpC5YACgkQL6j7milTFsEHYACfX/Hd595qrkgEWS6OtUGow63V T3wAnA5cGU1AyYOrEuW1vJhD+2g0Hgdk =DzaT -----END PGP SIGNATURE----- _______________________________________________ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users