bind 9 as a resolver only form my network

Discussion in 'Server Operation' started by ShadoweElf, Sep 15, 2013.

  1. ShadoweElf

    ShadoweElf New Member

    hi all

    I have my own ip class (256 ip's... bgp)
    now i'm using google ns servers
    i want to use my own server's for rezolve name's and I want this server's to be used only for my ip class. It should cache rezult's. I want to be secure as possible, to not be used for ddos...etc.

    I have done a test and it works. Here is my named.conf
    options {
            listen-on port 53 { any; };
            listen-on-v6 port 53 { any; };
            directory       "/var/named";
            dump-file       "/var/named/data/cache_dump.db";
            statistics-file "/var/named/data/named_stats.txt";
            memstatistics-file "/var/named/data/named_mem_stats.txt";
            allow-query     { any; };
            recursion yes;
    logging {
            channel default_debug {
                    file "data/";
                    severity dynamic;
    zone "." IN {
            type hint;
            file "";
    include "/etc/named.conf.local";
    but I belive in this configuration... any can use it as a dns server... and i don't want this. Allso I belive it is "opened" to be used for ddos attack.

  2. TiTex

    TiTex Member

    why ?

    for the other problem ... use ACL's

Share This Page