recursion question

[Carlos Horowicz]

Hi,

I have a question concerning configuration of - a possibly selective -
recursive behaviour:

is there a way to tell a bind-8.2.2-t3b, which is authoritative for some
domains, to handle recursion only for
queries coming from specific sources ?

Let's say, the server is authoritative for domain xx.yy.zz, and a query
from an unknown source arrives asking for
aa.bb.cc.xx.yy.zz: if there's an acl to reject this query, the asking
server will get a REFUSED response code.
OTOH, a non-recursive server would give back the authority records for
xx.yy.zz, which would let
the asking server go a step further. What does the protocol say ? if the
asking server gets REFUSED
from all xx.yy.zz secondaries, does it give up, or should make it
further attempts, for example cc.xx.yy.zz/ANY,
etc ?

Bye

Carlos Horowicz
Ministry of Foreign Affairs
NIC-Argentina