how to block unwanted domain queries??

[Thomas Bianco]

Forwarders only work if the server cannot find an authoritative answer on the local box. Since this server is now authoritative for everything, nothing will be forwarded. This is the expected behaviour.

Move the fake "." domain to the last server in your forwarder chain. This will allow your normal DNS behaviour right up to the edge of your network, where it will return NXDOMAIN.

[Thomas Bianco]

just checking in. any new status? is it working?

[Ho_5]

Hi Thomas,

I have put zone "." at the end of /etc/named.conf, but forward still doesn't work.
So any clue??

//john

[Thomas Bianco]

I think I understand now. You have a named.conf file that looks like this

domain private.gprs
server
server

And you're wondering why the second server is not used? Here's why:

When you're application goes to grab an IP against a name it's going to look at nsswitch.conf for the names (somebody check me) entry that probably looks like this

names dns files

This tells it to look at named.conf and try it first, then look at /etc/hosts

When it uses named.conf it's going to try the first server, and only if it fai...

[Thomas Bianco]

doh!
I just realized that whole last post I was talking about named.conf and ment resolv.conf

do a sed s/named.conf/resolv.conf/ on my post.