Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am replacing my BIND authoritative nameserver with PowerDNS w/ gmysql backend. I'd like to have my primary domain and its associated hosts like to be available to other internet nameservers. However, I want certain subdomains (such as to resolve to internal IPs, and therefore I don't want them available to other nameservers. For example, might point to 192.168.x.x.

I accomplished this before in BIND by specifying an ACL for the IP range of my internal network, then adding an allow-query line to the zone.

Is this approach bogus? Is there some alternative to ACLs in PDNS? Do these internal names need to be delegated to another server? It would be convenient to have in one place for administration.

share|improve this question
up vote 2 down vote accepted

Currently this is not supported in PowerDNS.

There are several patches that will add this functionality but all have limitations. The most promising I have found is: PDNS ACLs

share|improve this answer
Actually had seen this mailing list post, good stuff, thanks for reminding me to accept an answer here. – Cory J Nov 1 '10 at 19:21

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.