Home / server / Questions / 888874
In Process
rocket_doge_
Asked: 2017-12-20 06:59:49 +0800 CST

Bind9 Server Default NXDOMAIN Response

  • 772

I have been searching the internet about this for a while and did not seem to be able to find a solution:
Is it possible to configure Bind9 in a way that it returns a default ("The page you are looking for does not exist"-kind-of) IP when it receives a request to a nonexistant domain?

For example asdfsdfsdafsdf.com (or any not registered domain) would not return NXDOMAIN, but rather a default IP Address redirecting to this "Address not found"-page.

domain-name-system

1 Answers

  1. I don't believe BIND has any functionality that can do this. RPZ is probably the feature that comes the closest, but has no trigger for NXDOMAIN.

    That said, what you are asking for is more likely just causing problems for the users; typically any benefit is rather entirely the service provider's, since they get to show their ads or whatever their goal is. (Probably related to why this practice is both frowned upon at large and not a feature implemented in BIND.)


    The more idealistic issues aside, some concrete technical problems that arise for users are obvious:

    • It's severely HTTP-in-a-browser-used-by-a-human centric.

      • It falls apart with HTTPS, causing confusion.
      • It causes great confusion with programmatic HTTP access.
      • It causes great confusion with applications/protocols not handled by your service (likely anything but HTTP).

    • It breaks already on the DNS level with DNSSEC.

      • You are lying in the responses, this is exactly what DNSSEC is meant to catch.
    • 0