Re: Blocking reverse lookup queries for private ips

2016-11-22 Thread Sachin Patil
Sending this to bind list ... had only sent to Tony by mistake.. !! On Tue, Nov 22, 2016 at 5:45 PM, Sachin Patil <04sac...@gmail.com> wrote: > Hello Tony, > Thank you very much for the reply. > > I have configured bind in forward mode. > My conf file looks like - > > options { > > directory "/va

Re: Blocking reverse lookup queries for private ips

2016-11-22 Thread /dev/rob0
On Tue, Nov 22, 2016 at 10:57:00AM +, Tony Finch wrote: > Sachin Patil <04sac...@gmail.com> wrote: > > > I want to return nxdomain for any private ip reverse lookup. > > BIND does this by default. Look for "built-in empty zones" in > https://ftp.isc.org/isc/bind9/cur/9.11/doc/arm/Bv9ARM.ch06.

Re: Blocking reverse lookup queries for private ips

2016-11-22 Thread Tony Finch
Sachin Patil <04sac...@gmail.com> wrote: > I want to return nxdomain for any private ip reverse lookup. BIND does this by default. Look for "built-in empty zones" in https://ftp.isc.org/isc/bind9/cur/9.11/doc/arm/Bv9ARM.ch06.html Tony. -- f.anthony.n.finchhttp://dotat.at/ - I xn--zr8h pun

Blocking reverse lookup queries for private ips

2016-11-22 Thread Sachin Patil
Hello All, I want to forward reverse dns lookup queries for private ips to forwarders on my bind server. I have searched on internet and found I can have mapping to my private ips in ptr db records but I don't want this. I want to return nxdomain for any private ip reverse lookup. Can I do th