Configure Bind to Server Only Internal Host

In most situations, bind will be configured to server internal network only. This section guides you on how to configure bind to facilitate DNS service for internet network only.

Set Options

allow-query

allow-transfer

Set Options

The simple way to set the traffic is to define options clauses in /etc/bind/named.conf:

options {

            allow-query { 192.168.1/24; } ;

            allow-transfer { none; } ;

            allow-recursion { 192.168.1/24; } ;

            listen-on { 192.168.1.2; } ;

            forward { only; } ;

            forwarders { A.B.C.D; } ;

};

allow-query

This is to set the range of IPs allowed for querying. Notice the example above stated that only client with the IP pattern 192.168.1.XXX are allowed to query the DNS service.

allow-transfer

This is to specify zone transferring. In this case, it's best to set it to none;.

allow-recursion

DNS allows recursive queries so this should aligned to the same as allow-query. Recursion query is like when the local bind server could not resolve

listen-on

This is the most important option: set it only serve from a single IP. In this case, one must set it to the internal IP address (in the example above: 192.168.1.2). One can also set the DNS server to serve only to this computer by setting the IP to 127.0.0.1.