[ILUG] making bind not ask about private subnets

[Ronan Mullally]

On Sat, 5 Mar 2011, Brendan Kehoe wrote:

> What's the right way to configure bind to make sure it won't look
> outside for anything related to 192.168.0.0/16 or 10.0.0.0/8 ?

Depending on the linux disto you've got you may well find zone files
already there to do just that - making the server authoritative for
these domains.  Debian has a 'db.empty' file which I apply with:

 zone "10.in-addr.arpa"      { type master; file "/etc/bind/db.empty"; };

 zone "16.172.in-addr.arpa"  { type master; file "/etc/bind/db.empty"; };
 zone "17.172.in-addr.arpa"  { type master; file "/etc/bind/db.empty"; };
 ...
 zone "31.172.in-addr.arpa"  { type master; file "/etc/bind/db.empty"; };

 zone "168.192.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
 zone "254.169.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };


-Ronan