[dnsdist] can dns responses be changed or suppressed ( E.g. suppress A records for all internal IPs) ?

[bert hubert]

On Mon, Jun 11, 2018 at 10:09:55AM +0200, Remi Gacogne wrote:
> > In short: I'd like to suppress e.g. any A record that contains internal
> > IPs from the private IP space in order to hide internal topology better
> > from outside clients without the need to run and maintain multiple
> > instances of a single dns-zone for internal or external "view".
(...)
> I'm afraid not. We try hard to limit the parsing of responses to a
> minimum in dnsdist for performance reasons, and we don't have the

However, it is possible to do this in the PowerDNS Recursor in
postresolve(), where records can be stripped or replaced.

	Bert