Solved

BIND - restricting public access to a specific zone

Posted on 2007-03-27
5
250 Views
Last Modified: 2013-12-16
I have an internal zone that I've setup, however I'd like to restrict access to this zone file to only machines on our internal network with the IP addresses 10.9.3.x.  

I am running Fedora Core 3 with BIND.  How can I restrict all outside traffic and not allow them to resolve host entries just for that zone?  I can see where there is an allow-transfer within my named.conf file, however within the zone file itself - is this where I need to restrict it?

Thanks for your response.
0
Comment
Question by:JWeb Admin
  • 3
  • 2
5 Comments
 
LVL 70

Accepted Solution

by:
Chris Dent earned 500 total points
ID: 18802923

Hi,

Add an allow-query statement to named.conf for the zone:

zone "name"
{
  ...
  allow-query { 10.9.3.0/24; }
}


HTH

Chris
0
 

Author Comment

by:JWeb Admin
ID: 18802950
OK - I don't have to do anything else as far as adding a statement to say "don't allow anyone else, but allow 10.9.3.0/24?"
0
 
LVL 70

Expert Comment

by:Chris Dent
ID: 18803023

Nope, it's implied by the allow-query statement.

Chris
0
 

Author Comment

by:JWeb Admin
ID: 18803097
Thanks!
0
 
LVL 70

Expert Comment

by:Chris Dent
ID: 18803184

You're welcome :)

Chris
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
DNS Woes 7 41
Can't See Site After DNS Resolved 7 46
Use CRON to save a copy of an open file 1 16
expectj telnet failing 5 17
Occasionally you run into the website or two that will not resolve properly using your own DNS servers.  Some people simply set up global forwarders for their DNS server.  I don’t recommend doing this because it can cause problems resolving addresse…
The purpose of this article is to show how we can create Linux Mint virtual machine using Oracle Virtual Box. To install Linux Mint we have to download the ISO file from its website i.e. http://www.linuxmint.com. Once you open the link you will see …
Connecting to an Amazon Linux EC2 Instance from Windows Using PuTTY.
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.

929 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now