CODEWITHSUNDEEP
dnsbind9
Combinu
Combinu

Reputation: 907

Split Domain using BIND 9

So basically we would like that if 2 subdomains redirect to the same IP address for example sub1.example.com and sub2.example.com redirect to 1.2.3.4. the firewall handles the request and redirects to an internal IP address.

Example:

sub1.example.com->1.2.3.4(external)->DNS->10.1.100.1(internal)

sub2.example.com->1.2.3.4(external)->DNS->192.168.0.1(internal)

A better illustration is shown in the image below: DMZ

How can this be achieved from a firewall that uses BIND 9 dns module?

Just a note: The firewall is Zentyal.

Upvotes: 0

Views: 385

Answers (1)

Hmbl Stdnt
Hmbl Stdnt

Reputation: 9

This is not a BIND issue.

This is a firewall/web proxy issue. BIND is a name server, its only job is to serve IP addresses when queried with a FQDN (fully qualified domain name).

You would either need to have some type of port or selective IP forwarding on the firewall with either inbound NAT or using a forwarding proxy. Check the firewall documentation here https://doc.zentyal.org/en/firewall.html or a configuration with NAT (simplistic) https://doc.zentyal.org/en/appendix-b.html or possibly this https://doc.zentyal.org/en/appendix-c.html if you are familiar with iptables based firewalls and write the module you need.

A normal firewall/proxy would need to receive the communication, examine a portion of the IP header to determine the host destination, not the IP destination, and then forward the packet to the correct internal host.

Upvotes: -1

Related Questions