nixCraft

I am planning a project for a client that is going to require both authoritive, and recursive dns. Authoritive so that they can host DNS for their clients, and recursive so that their clients CPE can resolve locally. I intend to lock down recursion to the customer's subnets to prevent cache poisoning and such. I'm using BIND 9, and Caching-Nameserver on CentOS 5.4, and My question is as follows:

Can this be done reliably to begin with, or should i find another way ?

and

If it can be done, is BIND using the named.caching-nameserver.conf for the caching server, and named.conf for the authoritative, or is it using named.conf for both ?

Cheers, and thanks for the help

Both can be done using named.conf. Use acl to restrict recursive dns to lan clients or subnet as per your requirements. Another possibility is to use two virtual ips with two config files, one for public domain (authoritative) and another for recursive dns server.

__________________
Vivek Gite
Linux Evangelist
Be proud RHEL user, and let the world know about your enterprise choices! Join RedHat user group.
Always use CODE tags for posting system output and commands!
Do you run a Linux? Let's face it, you need help

Thank you very much for your thoughts. I very much value your input. I would like to post my named.conf as I develop it, just in case i have problems, or things don't behave the way i expect them to.

Thanks Again