For my particular setup, I've got control of a BIND 9 zone file for, say,
example.com. There are several hosts in this zone, such as
mail.example.com. I want the public internet to be able to query these hosts and retrieve their IPs as you'd expect.
Can some hosts be flagged as "private", in the sense that most public internet users can't query information about these hosts, except for a specific IP range of users? For example, can I make a third host,
secret.example.com query-able only by users in the
I'm aware that I can do this with separate zones in BIND, but this doesn't seem to offer what I need. The key here is that both the public and private hosts need to be part of the same parent,
example.com in this case. This could also be achieved by the
/etc/hosts file on the few privy machines, but then the records would not be centrally manageable.
Is this possible, or am I overlooking a different solution?