Great Circle Associates Firewalls
(February 1997)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: Split DNS - Another way
From: Matt Larson <matt @ acmebw . com>
Date: Sat, 15 Feb 1997 01:40:22 -0500
To: "James R Grinter" <jrg @ gbnet . net>, "Lack Mr G M" <gml4410 @ ggr . co . uk>, firewalls @ GreatCircle . COM

At 02:25 PM 2/14/97 -0000, James R Grinter wrote:
>On Fri 14 Feb, 1997, "Lack Mr G M" <gml4410 @
 ggr .
 co .
 uk> wrote:
>>multiple *internal* primaries.  What is required is a way to  tell  each
>>of  these  primaries  that  the other internal primaries *are* internal.
>>Currently, all you can do is send antything that you are not  a  primary
>>or  secondary  for to a forwarder, unless you have patched code to allow
>>you to configure other *internal* name servers  (which  fortuantley  for
>>me, I do).
>
>If you don't want to be a full secondary for those internal domains,
>you could use the 'stub' directive for them, without much effort
>and without having to add your own code into bind.

Unfortunately, stub doesn't work in this case.  The "forwarders" directive
sends any query that can't be satisfied from the name server's cache or
authoritative data to the designated forwarders name server(s) for
resolution.  A name server with a forwarders directive will not follow NS
records to get to other zones.  Since the stub directive only imports NS
records from the target zone, it doesn't work in this situation.

Matt
--
Matt Larson <matt @
 acmebw .
 com>
Acme Byte & Wire -- DNS and Internet security consulting and training
(301) 571-0444 voice / (301) 564-0890 fax / http://www.acmebw.com



Follow-Ups:
Indexed By Date Previous: Re: MacOS Web Server
From: dave <tel1dvw @ ups . com>
Next: ISDN dial-up
From: aub @ atmsys . com (Alberto Begliomini)
Indexed By Thread Previous: Re: Split DNS - Another way
From: Matt Larson <matt @ acmebw . com>
Next: Re: Split DNS - Another way
From: carson @ lehman . com

Google
 
Search Internet Search www.greatcircle.com