Search Again:

Re: Only allow certain clients to do lookups

From: Men & Mice Support
Date: Wednesday, October 27, 2004
Time: 11:46:40 am

At 12:22 AM -0700 10/27/04, Scott Haneda wrote:
>on 10/26/04 11:21 PM, Men & Mice Support at cbuxton@menandmice.com wrote:
>
>>> I tried to
>>> read about this in the manual, but it is somewhat vague as to
>>>what it really
>>> does. My guess is the entire world will at some time or another
>>>need to ask
>>> something of my DNS server, so this settings mere existence confuses me
>>> other than to block known abusers?
>>
>> Use this setting to permit authorized users to send recursive queries
>> to your server (meaning, permit authorized users to ask your server
>> to do work). Anyone else's query will have the "rd" flag (recursion
>> desired) ignored.
>
>Thanks, I think I am starting to get this. The instructions say I can enter
>in a range of Ip's, which would be nice since I don't want to enter in 64 IP
>addresses, how do you define a range? I am assuming it is the "/" notation,
>for which I never really understood how that works at all.

Yes, it's the "/" notation. To understand this notation, you have to
think in binary bits. An IP address is 32 bits long. A subnet mask is
also 32 bits long - a certain number of 1's followed by the rest in
0's. The count of 1's (in decimal) is the "length" of the mask - it's
the number after the "/".

The mask represents the number of bits all addresses in the range
have in common. For example, a 24 bit subnet mask means that all
addresses in the subnet share the first 24 bits - each octet is 8
bits, hence the name "octet". So a 24 bit mask means a class C subnet.

A block of about 64 addresses (actually there are 62 usable addresses
in such a subnet, due to the routing and broadcast numbers) is a 26
bit subnet. And the number you list at the start is the routing
number, which is always 1 less than the lowest-numbered address in
the range. So if the range is 192.168.1.65 through 192.168.1.126, the
subnet is written as 192.168.1.64/26.

If that's not sufficiently clear, then tell us about the range you
want to enter.

Chris Buxton
Men & Mice - Making DNS Easy
Customer Service and Sales Engineer



Messages In This Thread:



Return to Digital Point Solutions' Home Page