Re: DNS question

Mitchell B. Wagers ( (no email) )
Mon, 16 Mar 1998 12:16:28 -0800

It's very easy with Microsoft's DNS Server to set "notify" lists so that
other servers are blocked from grabbing your files.

Just go through the properties of each zone...Notify tab.

At 04:49 PM 3/16/98 -0300, you wrote:
>Thanks.
>
>Carlo
>
>----------
>> De: Kurt Schafer <kahuna@cyberbeach.net>
>> Para: RadiusNT@iea-software.com
>> Assunto: Re: DNS question
>> Data: Segunda-feira, 16 de Mar=E7o de 1998 15:11
>>=20
>> I'm almost positive you can edit your DNS server so that only authorized
>> hosts can do zone transfers while still being able to query the server
>for
>> addresses from unauthorized hosts.
>>=20
>> ie, if you have a zone file that looks like this
>>=20
>> www.domain.com IN A 192.168.0.1
>> ftp.domain.com IN A 192.168.0.2
>> mail.domain.com IN A 192.168.0.3
>> topsecretmachine.domain.com IN A 192.168.0.4
>>=20
>> you can set up your DNS server to resolve addresses that people ask for
>> (like www.domain.com) but to not let people actually download your entire
>> zone file. (and thereby be able to find out about the topsecretmachine)
>>=20
>> If you run BIND on a unix host, grab the latest version and go through
>the
>> docs. If you run MS-DNS, I have no idea but I'm sure if the functionality
>> exists, it can't be too hard to find it. If you run a Cisco router, I
>think
>> you can implement some of this in access lists as well.
>>=20
>> =3D K
>>=20
>> -----Original Message-----
>> From: Carlo Gibertini <carlo@nw.com.br>
>> To: RadiusNT@iea-software.com <RadiusNT@iea-software.com>
>> Date: Saturday, March 14, 1998 8:25 AM
>> Subject: DNS question
>>=20
>>=20
>> >I have a doubt: How can I configure DNS so that it won't show address
>> >records to strangers outsiders of my network?
>> >
>> >I can do this ?
>> >
>> >Thanks,
>> >
>> >Carlo
>> >
>> >
>> >
>> > ----------------------------------------------------------
>> > RadiusNT Mailing List lists@iea-software.com
>> >
>> >
>>=20
>>=20
>> ----------------------------------------------------------
>> RadiusNT Mailing List lists@iea-software.com
>>=20
>
>
> ----------------------------------------------------------
> RadiusNT Mailing List lists@iea-software.com
>
>