Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

disabling caching on selected zones

0 views
Skip to first unread message

Ollie Wild

unread,
Aug 21, 2004, 9:00:47 PM8/21/04
to
Hi. I'm running a simple bind configuration on my home network. The
bind daemon is authoritative for my local network. Any requests outside
my local network are forwarded to my ISP:

zone "." {
type forward;
forward only;
forwarders {
xx.xx.xx.xx;
};
};

I also have a vpn to my office network, which I only enable
occasionally. The name of our office mail server resolves externally,
but access is disabled. Once the vpn is active, the same hostname
resolves to an internal IP from which I can access mail.

The problem is that named caches the external IP, so everytime I enable
the vpn, I have to restart named to access my mail. Is there a way to
explicitly configure bind to disable caching of results from a specific
zone?

Thanks,
Ollie Wild

Barry Margolin

unread,
Aug 21, 2004, 10:52:15 PM8/21/04
to
In article <cg8sei$elq$1...@sf1.isc.org>, Ollie Wild <a...@rincewind.tv>
wrote:

I don't think so. But if you have a script that runs to establish the
VPN, you could have it send a command to named to clear the cache.

--
Barry Margolin, bar...@alum.mit.edu
Arlington, MA
*** PLEASE post questions in newsgroups, not directly to me ***

p...@icke-reklam.ipsec.nu

unread,
Aug 22, 2004, 6:32:00 AM8/22/04
to

> Thanks,
> Ollie Wild

Yes.

first remove the global "forward statements", they make no sense in most
applications. Secondly define a "forward zone" to your office nameserver
( i assume your office runs split-dns, possibly using views, giving out
Interhet-addresses to anyone on Internet, and handing out 1918-addresses
to anyone on inside. You would like to belong to the "insiders" i assume.


--
Peter Håkanson
IPSec Sverige ( At Gothenburg Riverside )
Sorry about my e-mail address, but i'm trying to keep spam out,
remove "icke-reklam" if you feel for mailing me. Thanx.

Sai balasubramanyam

unread,
Aug 22, 2004, 4:46:10 AM8/22/04
to
hello ,
If the ttl parameter isn't set in a specific zone the golbal values
will take affect. so you can add something like to your root zone.
-------
max-cache-ttl <very small number in secs>
------
In case if you are running bind version older than 9 , I think you can
add fetch-glue no to your zone in named.conf.

HTH ,
-Sai.

Ollie Wild <a...@rincewind.tv> wrote in message news:<cg8sei$elq$1...@sf1.isc.org>...

0 new messages