Mdthbs

I've been fighting with this for the last few days. A few of my entries have external and internal IP's. My internal network is 10.0.0.0/8.

When I nslookup pc1.clase.net internally it responds with a 10.0.0.0 address but if I nslookup pc1.clase.net externally it still gives me a 10.0.0.0 address.

I'm on Debian Wheezy.

named.conf

include "/etc/bind/named.conf.options";

view "internal" {

  match-clients { 10.0.0.0/8;};

  zone "clase.net"{

    type master;

    file "/etc/bind/internals/db.forward.net";

    allow-transfer { 10.0.0.11/8; }

  };

};

include "/etc/bind/named.conf.default-zones";



zone "10.in-addr.arpa" {

  type master;

  file "/etc/bind/internals/db.reverse.net";

  allow-transfer { 10.0.0.11/8;

  };

};

};



view "external" {

  match-clients { any; };

  zone "clase.net" {

    type master;

    file "/etc/bind/externals/db.forward.net";

    allow-transfer { 10.0.0.11/18;

    };

  };

};

internal/db.foward.net

$TTL    604800

@       IN      SOA     ns.clase.net. root.clase.net. (

                     2 ; Serial

                         604800 ; Refresh

                          86400 ; Retry

                        2419200 ; Expire

                         604800); Negative Cache TTL

;

@   IN  NS  ns.clase.net.

ns  IN  A   10.0.0.10

pc1 IN  A   10.0.0.12

external/db.forward.net

$TTL    604800

@       IN      SOA     ns.clase.net. root.clase.net. (

                     2 ; Serial

                         604800 ; Refresh

                          86400 ; Retry

                        2419200 ; Expire

                         604800); Negative Cache TTL

;

@   IN  NS  ns

    IN  A   150.210.0.1

ns  IN  A   150.210.0.1

pc1 IN  A   150.210.0.22

Not sure if this is your issue but in looking at your config file it looks like you have some typos in it.

Example

This block looks like it has too many closing braces (};).

zone "10.in-addr.arpa" {

  type master;

  file "/etc/bind/internals/db.reverse.net";

  allow-transfer { 10.0.0.11/8;

  };

};

};

Should be this, no?

zone "10.in-addr.arpa" {

  type master;

  file "/etc/bind/internals/db.reverse.net";

  allow-transfer { 10.0.0.11/8; }

};

Cleaned up version of your named.conf file.

include "/etc/bind/named.conf.options";

view "internal" {

  match-clients { 10.0.0.10/24;};

  zone "clase.net" {

    type master;

    file "/etc/bind/internals/db.forward.net";

    allow-transfer { 10.0.0.11/8; };

  };

};



include "/etc/bind/named.conf.default-zones";



zone "10.in-addr.arpa" {

  type master;

  file "/etc/bind/internals/db.reverse.net";

  allow-transfer { 10.0.0.11/8; };

};



view "external" {

  match-clients { any; };

  zone "clase.net" {

    type master;

    file "/etc/bind/externals/db.forward.net";

    allow-transfer { 10.0.0.11/18; };

  };

};

wrong client network?

These lines look incorrect to me:

view "internal" {

  match-clients { 10.0.0.0/8;};

  zone "clase.net"{

    type master;

    file "/etc/bind/internals/db.forward.net";

    allow-transfer { 10.0.0.11/8; }

  };

};

Should be this, no?

view "internal" {

  match-clients { 10.0.0.0/8;};

  zone "clase.net"{

    type master;

    file "/etc/bind/internals/db.forward.net";

    allow-transfer { 10.0.0.0/8; }

  };

};

References

• BIND 9 Configure Views To Partition External and Internal DNS Information

Finally found out how to do it.

Requires the TSIG keys to differentiate the 2 zones.

Example

-Here take a look!!!

named.conf

// If you are just adding zones, please do that in /etc/bind/named.conf.local



include "/etc/bind/named.conf.options";

include "/etc/bind/named.conf.local";

include "/etc/bind/named.conf.default-zones";

include "/etc/bind/t-sig.key";

named.conf.options

acl internals {

                127.0.0.0/8;

                10.0.0.0/8;

              };



options {



    directory "/var/cache/bind";



    allow-recursion     { internals; };

    allow-query-cache   { internals; };

    allow-query         { internals; };



    dnssec-enable     yes;

    dnssec-validation yes;



     forwarders {



        // -Google - JUST FOR SAMPLE!!!

        8.8.4.4;

        8.8.8.8;



    };



    auth-nxdomain no;    # conform to RFC1035

    listen-on-v6 { any; };

};

named.conf.local

include "/etc/bind/zones.rfc1918";



acl internals {

    127.0.0.0/8;

};



    zone "localhost" { 

        type master; 

        file "/etc/bind/db.local";

     };



};

named.conf.default-zones

// prime the server with knowledge of the root servers



    zone "." {

        type hint;

        file "/etc/bind/db.root";

    };



// be authoritative for the localhost forward and reverse zones, and for

// broadcast zones as per RFC 1912



    zone "sample.net" {

        type master;

        file "/etc/bind/db.sample.net";

        allow-query     { internals; };

        allow-transfer  { key t-sig.key; };  

    };



    zone "localhost" {

        type master;

        file "/etc/bind/db.local";

        allow-query { 127.0.0.0/8; };

        allow-transfer  { key t-sig.key; };

    };



    zone "127.in-addr.arpa" {

        type master;

        file "/etc/bind/127.in-addr.arpa";

        allow-query { 127.0.0.0/8; };

        allow-transfer  { key t-sig.key; };

    };



    zone "10.in-addr.arpa" {

        type master;

        file "/etc/bind/0.0.10.in-addr.arpa";

        allow-query { internals; };

        allow-transfer  { key t-sig.key; };

    };



    zone "0.in-addr.arpa" {

        type master;

        file "/etc/bind/0.in-addr.arpa";

        allow-query { internals; };

    };



    zone "255.in-addr.arpa" {

        type master;

        file "/etc/bind/255.in-addr.arpa";

        allow-query { internals; };

    };