[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: dns takeover with dhcp-dns

On Sat, Sep 29, 2001 at 09:04:33PM +0200, PiotR wrote:
> Anyone knows if dhcp-dns allows to filter some hostnames, in order    
> not to update them?. With the actual behavior its easy to take over   
> dns entries.  I'm concerned about users taking over server's dns      
> entries.                                                              

nope, not possible with dhcp-dns as it's written.

it's perl, though, and probably wouldn't be too hard to modify so that
it rejected specific names.

>  Any ideas?

use a subdomain for the dynamic entries.  don't put any servers in the 
dynamic domain.

e.g. if your main domain is "example.com", use "pn.example.com" for
dhcp-dns...then there's no chance that dhcp-dns can touch your main

("pn" == abbreviation for private network.)


craig sanders <cas@taz.net.au>

Fabricati Diem, PVNC.
 -- motto of the Ankh-Morpork City Watch

Reply to: