[SOLVED] Source based DNS reply?

szboardstretcher · 01-11-2011, 11:15 AM

Is there a way to configure or set up Bind, to reply to a lookup with one IP address if the source is say 10.131.1.0/24 and another if the source is anything else?

So if I am on my home computer at 10.131.1.78 and I type in www.thatserver.com the DNS server replies that IP address is 1.2.3.4

However, If I am in germany with an ip of 191.123.3.31 and I type in www.thatserver.com the DNS server replies that IP address is 8.9.8.9

szboardstretcher · 01-11-2011, 11:32 AM

To answer my own question. Yes this is possible using the "view" clause in BIND.

Quote:

view "trusted" {
match-clients { 192.168.23.0/24; }; // our network
recursion yes;
// other view statements as required
zone "example.com" {
type master;
// private zone file including local hosts
file "internal/master.example.com";
};
// add required zones
};
view "badguys" {
match-clients {"any"; }; // all other hosts
// recursion not supported
recursion no;
// other view statements as required
zone "example.com" {
type master;
// public only hosts
file "external/master.example.com";
};
// add required zones
};

More information here in this manual page: http://www.zytrax.com/books/dns/ch7/view.html