Re: Negative zones; NXDOMAIN responses

2013-05-19 Thread Steven Carr
On 19 May 2013 23:14, Sten Carlsen wrote: > .local actually has meaning for most modern systems, so I would question the > wisdom of what you want to do. > > You may find some functions of systems not working any more. Obviously it is > up to you in the end. Looking at the bug link that would see

Re: Negative zones; NXDOMAIN responses

2013-05-19 Thread Sten Carlsen
>> These LAN have a BIND9 service to provide name resolving and caching for >> internet access, and I want to intercept the .local domain to give a >> NXDOMAIN response. The internet ISP returns positive values for .local >> queries, and I need that LAN clients receive NXDOMAIN instead. .local act

Re: Negative zones; NXDOMAIN responses

2013-05-19 Thread Steven Carr
But in response to the actual question... what you want to do is not possible in BIND zone configs as you can't create a negative zone (that I'm aware of). However in later versions of BIND9 you can create a local RPZ zone which you could then use to send back a negative response for .local http:/

Re: Negative zones; NXDOMAIN responses

2013-05-19 Thread Steven Carr
Why are you forwarding queries to the ISP? Implement your own caching layer, I for one would never use/trust an ISPs caching servers. If I want to resolve a domain I go direct to the source, not via a 3rd party. On 19 May 2013 20:51, Narcis Garcia wrote: > Hello, > > I'm trying to solve this pro

Negative zones; NXDOMAIN responses

2013-05-19 Thread Narcis Garcia
Hello, I'm trying to solve this problem in some local networks, without intervention to client computers: https://bugs.launchpad.net/ubuntu/+source/avahi/+bug/327362 These LAN have a BIND9 service to provide name resolving and caching for internet access, and I want to intercept the .local domain