Great Circle Associates Firewalls
(September 1997)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: split dns - bind 4
From: "Chris Kostick" <christopher . t . kostick @ cpmx . saic . com>
Date: Tue, 23 Sep 1997 08:25:45 -0400
To: "David Park" <davidp @ cyber-hawaii . com>
Cc: <firewalls @ greatcircle . com>

> anyone know if there is a split brain dns implemenation for NT?


Use BIND 

http://www.software.com/prod/bindnt/bindnt.html

> 
> > -----Original Message-----
> > From:	Colin Campbell [SMTP:sgcccdc @
 citec .
 qld .
 gov .
 au]
> > Sent:	Monday, September 22, 1997 1:15 PM
> > To:	ark @
 paranoid .
 convey .
 ru
> > Cc:	firewalls @
 GreatCircle .
 COM
> > Subject:	Re: split dns - bind 4
> > 
> > My mailer thinks ArkanoiD said:
> > > 
> > > nuqneH,
> > > 
> > > Is BIND 4 ok for split DNS setup on a single server?
> > > Does anybody have configuration examples?
> > > 
> > No, I believe you need bind-8.x. I use a split-dns on the bastion host
> > as follows:
> > 
> > 	/usr/sbin/named /etc/named.conf.internal
> > 	/usr/sbin/named /etc/named.conf.external
> > 
> > The internal named listens on 127.0.0.1, is a secondary of the real
> > internal DNS and forwards to the intenal interface The external DNS
> >  listens on both the internal and external ethernet interfaces -
> >  external so that outsiders can use it and internal so other internal
> > binds can forward. The resolver points to 127.0.0.1.
> > 
> > Here is the head of named.conf.internal (the rest of the file is just
> > zone definitions):
> > 
> >     options {
> > 	    pid-file "/etc/named.pid.internal";
> > 	    directory "/var/named/internal";
> > 	    listen-on {
> > 		    127.0.0.1;
> > 	    };
> > 	    forward only;
> > 	    forwarders {
> > 		    bastion.internal.address;
> > 	    };
> >     };
> > 
> > And here is the head of named.conf.external (again the rest is just
> > zone definitions):
> > 
> >     options {
> > 	    pid-file "/etc/named.pid.external";
> > 	    directory "/var/named/external";
> > 	    listen-on {
> > 		    bastion.external.address;
> > 		    bastion.internal.address;
> > 	    };
> > 	    forwarders {
> > 		    139.130.4.4;
> > 		    139.130.4.4;
> > 		    139.130.4.4;
> > 	    };
> >     };
> > 
> > [Over here (OZ) we are expected to forward to the host shown to reduce
> > traffic.]
> > 
> > Works a treat. Certainly speeds up the split DNS transactions.
> > 
> > Colin

Indexed By Date Previous: RE: Re: Solaris v. NT Performance (FW-1)
From: "Adams, Gavin" <gadams @ ccscns . com>
Next: Re: split dns - bind 4
From: Fred Donck <f . c . w . donck @ siep . shell . com>
Indexed By Thread Previous: RE: split dns - bind 4
From: David Park <davidp @ cyber-hawaii . com>
Next: Mircosoft's Base Camp
From: Graham_Dougall @ manulife . com

Google
 
Search Internet Search www.greatcircle.com