[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 296
  • Last Modified:

resolving whole domains to a single IP with bind

hi,

I'm looking to map every possible hostname in a domain to a single IP address eg:

i have a domain name sdf.com and i want any host within this domain to resolve to 12.12.12.12 so,
nslookup fsdf.sdf.com returns 12.12.12.12

as would sdfasdf.sdf.com or d3.sd.sdf.com

does anyone know how to accomplish this with bind?

Cheers,
Andrew.

ajonesatjigsawdotnetdotau
0
jonesy2k
Asked:
jonesy2k
  • 2
1 Solution
 
jlevieCommented:
I think having only:

*    IN A    12.12.12.12

in your zone file will do it. Out of curiosity why would you want to do this?
0
 
jonesy2kAuthor Commented:
I want to redirect people going to sites like kazaa.com and *.gator.com etc to a page I will create.

Thanks.
0
 
jlevieCommented:
Okay... That will work as long as they only use your DNS server. A knowlegeable user can simply set their machine to use a DNS server on the Internet and bypass your restriction. Or, even if you block DNS at a firewall so they have to use your DNS server they can create a hosts file record for the site.

That presumes that the ultimate goal is to block folks from using kazaa, gator, or other P2P clients. A better approach, if you want to work off the IP's is to block access to those IP's at a firewall or router. That solution only works for IP's that you know about or TCP/UDP ports that you know. A more complete solution, that works on the content of packets, is somthing like Packeteer or P2P WatchDog (http://www.p2pwatchdog.com/home.html).
0

Featured Post

Free learning courses: Active Directory Deep Dive

Get a firm grasp on your IT environment when you learn Active Directory best practices with Veeam! Watch all, or choose any amount, of this three-part webinar series to improve your skills. From the basics to virtualization and backup, we got you covered.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now