Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.protocols.dns.bind > #15732

Re: What is the proper way to delegate to a private / hidden sub-domain?

Show all headers | View raw

[Multipart message — attachments visible in raw view] - view raw

On 5/6/20 2:29 PM, Grant Taylor wrote:
> That's one of the hard requirements of what I'm doing.  Not doing that 
> is not an option.

To elaborate, the internal clients are in a sequestered network which 
will never have outside access to it.  As such, the outside world can 
never query something from a system in it.

Further, the external publicaly accessible DNS servers exist elsewhere 
on the Internet to provide just enough zone content to make delegation 
happy.

Perhaps the external publicaly accessible parent example.net can 
(blindly) delegate zones to internal private DNS servers.  However I 
dislike this because I believe it leaves things in an unclean state for 
people on the Internet a large.  At the very least it means no route to 
host errors at best or at worst timeouts.

Conversly, what I'm working on will immediately and successfully return 
a response of NXDOMAIN.  Something that I think is cleaner for the 
Internet at large.



-- 
Grant. . . .
unix || die

Back to comp.protocols.dns.bind | Previous | Next — Next in thread | Find similar

Thread

Re: What is the proper way to delegate to a private / hidden sub-domain? Grant Taylor <gtaylor@tnetconsulting.net> - 2020-05-06 14:37 -0600
  Re: What is the proper way to delegate to a private / hidden sub-domain? "John Levine" <johnl@iecc.com> - 2020-05-06 17:40 -0400

csiph-web