Limiting Bind9 Access

kemplej · 11-22-2005, 09:29 AM

I want to limit use of my nameserver running on Slackware 10.0 to my local users. It seems I cant use hosts.allow. Is there another way?

Thanks!

Justyn

stickman · 11-22-2005, 09:44 AM

You could use iptables to limit access or make the configuration in the named.conf file.

zhizaki · 11-22-2005, 01:36 PM

When you say "local users", are you referring to users on the server itself, or local users on the network?

Like various clients computers connecting to the DNS server or just users who are logged in on the server?

fur · 11-23-2005, 07:34 AM

By default named/bind will listen on all available interfaces. If you only want it to respond to local clients can't you just set it to listen on the local interface? If so, set it in your named.conf file. Then as long as outside DNS traffic is not being routed to your DNS server's local interface/address you shouldn't have to worry about other people using it. If that is not a option then look into using iptables.

kemplej · 11-25-2005, 11:52 AM

When I said local users I meant users on the same subnet.

stickman · 11-25-2005, 12:52 PM

Perhaps a combination of allow-query in the named.conf and/or iptables rules.