> to forward most traffic
> to the main resolver and handle the special zones accordingly.
I already had BIND running in my VPS as the authoritative for my zones.
I modified its config (and deleted /etc/resolv.conf):
options {
directory "/etc/namedb";
pid-file "/var/run/named/pid";
dump-file "/var/dump/named_dump.db";
statistics-file "/var/stats/named.stats";
forward only;
forwarders { 8.8.8.8; 8.8.4.4; };
also-notify { 193.201.116.2; };
allow-recursion { localhost; 127.0.0.1; 212.109.198.40; };
max-cache-size 1M;
};
zone "." { type hint; file "named.root"; };
zone "lena.kiev.ua" {type master; file "/etc/namedb/master/lena.kiev.ua";};
... other my zones ...
zone "dnswl.org" { type forward; forwarders { }; };
zone "spamhaus.org" { type forward; forwarders { }; };
zone "spamrats.com" { type forward; forwarders { }; };
// dnswl, spamhaus don't reply via 8.8.8.8
/* If no forwarders statement is present or an empty list is provided then
no forwarding will be done for the domain canceling the effects of any
forwarders in the options clause. */
// these reply via 8.8.8.8 though have limits in usage policy:
zone "hostkarma.junkemailfilter.com" { type forward; forwarders { }; };
zone "sorbs.net" { type forward; forwarders { }; };
zone "bl.mailspike.net" { type forward; forwarders { }; };
zone "surbl.org" { type forward; forwarders { }; };
