Filter recursive DNS requests

Alexander Clouter alex at digriz.org.uk
Sun Nov 23 11:34:23 EST 2008


Ali Jawad <alijawad1 at gmail.com> wrote:
>
> What I need done is the following, XP clients request DNS queries from a
> MaraDNS Linux server, the Linux server should only return requests for
> roughly 50 sites and the rest should all resolve to the same IP.
> I did check MaraDNS FAQ + Documentation, but I did not get how to get this
> done.
> 
> Any example configs or hints please ?
> 
The following works for us:

--- mararc ---
csv2 = {}
csv2_default_zonefile = "db.teh-world"

# The address this DNS server runs on.  If you want to bind
# to all addresses a given machine has, use "0.0.0.0".
bind_address = "172.16.183.1"
[snipped]
--------------

--- db.teh-world ---
*       SOA             example.com. hostmaster at soas.ac.uk. 1 7200 3600 604800 1800

*       +60 NS          punisher.it.soas.ac.uk.

*       +60 A           172.16.183.1
*       +60 MX 0        localhost.
*       +60 TXT         'Damn crazze foo! Murdock, is this your chicken?'

support.it.soas.ac.uk.  A       212.219.139.222

fog.it.soas.ac.uk.      A       212.219.138.234
wsus.it.soas.ac.uk.     A       212.219.138.235
--------------------

Of course when you say 'sites' do you mean DNS lookups that you have 
blessed (as I have done above) or do you mean for DNS lookups to a 
particular domain?  If it's the later you would be much better off with 
a HTTP/application proxy server; it's more appropriate too.

Cheers

Alex

-- 
Alexander Clouter
.sigmonster says: Many people write memos to tell you they have nothing to say.



More information about the list mailing list