SOHO : Small Office Home Office
Freeware - Opensource software tips, tricks, tweaks & fixes for managing, securing, improving the performance of SOHO Desktop, Laptop, Networks

Monday, January 18, 2010

Setup bind to resolve local dns request and not recursive

So, I want to allow programs on my server to ask my copy of BIND to perform recursive queries, but I don’t want it performing them for anyone else. How did I configure that? It’s very simple–it only takes a line in each of two configuration files. First, my resolv.conf file contains this line:


That means that programs on my server should send DNS queries to the DNS server at IP address (which as you may know is the “localhost” address–on every computer, it’s an IP address used by that computer). That line was already there, so I didn’t have to change that.

Second, I added one line to named.conf. The “allow-recursion” line in the “options” section specifies which IP addresses can request recursive queries from this server.

options {
allow-recursion {; };
// etc.

This means that recursive DNS requests coming from (with all 32 bits being significant) are allowed. All other recursive requests are blocked.

No comments:

Post a Comment