Private (only) DNS server setup?

Benjamin Walkenhorst krylon at gmx.net
Tue Oct 19 12:54:02 PDT 2004


Hi,

Ezequiel O. Block wrote:

> The allow-recursion option would limit queries only to your lan.  like 
> this
>
> options {
>
> allow-recursion { 192.168.1.0/24; 127.0.0.1; };
>
>     };
>
>
You can also say:

options {
    ...
    listen-on { 192.168.0.1; 127.0.0.1; };
};              ^^^^^^^^^^^
         (Or whatever your server's local IP is)

This way it will only listen on those interfaces.
Also, there's allow-query and blackhole... _Plus_ you can just use a 
packet filter
to protect your DNS-server from the internet. Possibilities are 
endless... =)

Kind regards,
Benjamin


More information about the freebsd-questions mailing list