On Fri, Aug 27, 2004 at 07:35:21AM -0400, Jason Opperisano wrote: > > What I'm looking for is for queries to one DNS server from certain > > IP addresses to be redirected to another... but without any > > interaction with the BIND daemon itself. > > can you provide a more detailed description of the network > architecture? it is unclear to me what you're actually trying to do. > is 198.81.129.101 a gateway, or just a host? where is 207.155.252.12 > in relation to the 198.81.129 network? where's the default gateway in > this situation? Good point, how's this? 207.155.252.12 - out on the Internet somewhere | | | 198.81.129.1 - default gateway | | | ------------------------------------- | | | 198.81.129.101 198.81.129.100 So usually a DNS request from the Internet comes in to 198.81.129.100, which .100 will answer as normal. However should .100 receive the DNS request from 207.155.252.12 it will redirect that packet to 198.81.129.101, back out the interface the packet came in on. Is that even possible? 198.81.129.100 and .101 have a single interface, IPtables is just being to protect the hosts themselves. -- mors omnia vincit