Removing zones without removing account

[kristian]

Hi,

Let's say a user wants to host his domain and nameservers at another ISP, but point the domain to our server, where he wants the hosting of web and mail.

I should then setup his account the usual way, only without any sort of DNS-setup, to avoid giving out false information to anyone who might ask our named for zone-entries.

How should I solve this?

(This goes for newly created accounts, and also old accounts which need the dns-zones removed.)

 

[kristian]

It seems that either this is so obvious that noone bothers to answer, because I should be able to figure out myself, OR noone has ever had this situation, whicih I find hard to believe..

Any ideas or pointers would be appreciated.

 

[nobaloney]

You should set up your server as a nonresolving server so no-one else should ask it.

You can delete the DNS zone from the admin control panel, but if you do, then be sure your own server doesn't use your copy of BIND for resoltion; make sure by looking in /etc/resolv.conf.

Jeff

 

[kristian]

You should set up your server as a nonresolving server so no-one else should ask it.

But requests from inside my own server would still give false data, right?

You can delete the DNS zone from the admin control panel, but if you do, then be sure your own server doesn't use your copy of BIND for resoltion; make sure by looking in /etc/resolv.conf.

Admin Tools -> DNS Administration? Good to know that it won't affect the account in any other way.

My resolv.conf currently contains my two official name-servers (hidden master-setup), so I'm safe I guess.

Thanks.

 

[nobaloney]

But requests from inside my own server would still give false data, right?

Not if you use external nameservers for your server's resolution (in the /etc/resolv.conf file).

My resolv.conf currently contains my two official name-servers (hidden master-setup), so I'm safe I guess.

No, that's what you don't want. You want to use cacheing (resolving nameservers) in /etc/resolv.conf, and your local nameserver should be non-cacheing.

Jeff