DNS inside a firewall

Derek Atkins warlord at MIT.EDU
Sat Feb 17 00:28:01 EST 2001


Anthony J Gabrielson <agabriel at home.tzo.org> writes:

> zone "home.tzo.org" {
>         type stub;
>         file "db.home.tzo.org";
>         masters { 192.168.1.10; };   
> };
> 
> This is db.home.tzo.org
> 192.168.1.in-addr.arpa. IN SOA home.tzo.org. (

This should be:
	@	IN	SOA	home.tzo.org. <addr>.home.tzo.org. (

where <addr> is your hostmaster's mailing list.  You don't want the
192.168.1.in-addr.arpa. as the lead-in zone.  Indeed, bind will
probably just reject this zone-file out-of-hand as the zone really
doesn't match.  Or, alternatively, you'd have to make a request for
"amps.192.168.1.in-addr.arpa.home.tzo.org" which is probably not what
you want ;)

>                 3       ;Serial
>                 10800   ; Refresh 3 hours
>                 3600    ; Refresh 3 hours
>                 604800  ; Expire after 1 week
>                 86400 ) ; Minimum TTL of 1 day
>         IN      NS      home.tzo.org.           
> ;
> amps            IN      CNAME   amps.coe.neu.edu

You probably want a trailing '.' after neu.edu.

-derek

-- 
       Derek Atkins, SB '93 MIT EE, SM '95 MIT Media Laboratory
       Member, MIT Student Information Processing Board  (SIPB)
       URL: http://web.mit.edu/warlord/    PP-ASEL-IA     N1NWH
       warlord at MIT.EDU                        PGP key available
-
Subcription/unsubscription/info requests: send e-mail with
"subscribe", "unsubscribe", or "info" on the first line of the
message body to discuss-request at blu.org (Subject line is ignored).



More information about the Discuss mailing list