Bind 9 Administrator Reference Manual

Chapter 4. Advanced Concepts

Internal DNS server conﬁg:

acl internals { 172.16.72.0/24; 192.168.1.0/24; };

acl externals { bastion-ips-go-here; };

options {

...

forward only;

forwarders { // forward to exter-

nal servers

bastion-ips-go-here;

};

allow-transfer { none; }; // sample allow-

transfer (no one)

allow-query { internals; externals; }; // restrict query access

allow-recursion { internals; }; // restrict recursion

...

};

zone "site1.example.com" { // sample master zone

type master;

file "m/site1.example.com";

forwarders { }; // do normal iterative

// resolu-

tion (do not forward)

allow-query { internals; externals; };

allow-transfer { internals; };

};

zone "site2.example.com" {

type slave;

file "s/site2.example.com";

masters { 172.16.72.3; };

forwarders { };

allow-query { internals; externals; };

allow-transfer { internals; };

};

zone "site1.internal" {

type master;

file "m/site1.internal";