Different DNS responses depending on query source

[Michael K. Smith - Adhost]

Hello Jeff:

> -----Original Message-----
> From: owner-freebsd-questions at freebsd.org [mailto:owner-freebsd-
> questions at freebsd.org] On Behalf Of Jeffrey Goldberg
> Sent: Thursday, October 11, 2007 8:55 AM
> To: freebsd-questions at freebsd.org
> Subject: Different DNS responses depending on query source
> 
> The host that runs my internal DNS server is down for the count (I've
> already replaced the power supply on it once, and I don't feel like
> doing it again).  Although I had other uses planned for that machine,
> the only useful thing it was doing was DNS for a local net and DHCP,
> the latter I've moved to my firewall box (running m0n0wall).
> 
> So, until I build a replacement machine, I'd like to run the DNS
> service on 6.2-RELENG machine on my DMZ.  However I have a conflict
> between providing IPs for the outside world to see, eg
> 
>     n114.ewd.goldmark.org	172.64.118.114
> 
> versus what I want when querying from the local network, eg,
> 
>     n114.ewd.goldmark.org	10.1.10.131
> 
> Also there are some internal names (eg, fluffy.ewd.goldmark.org)
> which shouldn't be advertised to the outside world at all.
> 
> The obvious answer would be to run two instances of bind, listening
> on different IPs (possibly using jails).  But I don't have an IP
> address to spare on the DMZ.  So is there a way to have bind
> listening on the only interface and IP address the host can have give
> different answers depending on where the query comes from?
> 
> Cheers,
> 
> -j
> 
> 
> 
> --
> Jeffrey Goldberg                        http://www.goldmark.org/jeff/
> 

I think what you're looking for is Bind Views.  Check out:

http://www.isc.org/sw/bind/arm93/Bv9ARM.ch06.html#id2562349

Regards,

Mike