auth vs caching setup

[Barry Margolin]

In article <PQ5J4.43790$E85.817669 at news1.rdc1.md.home.com>,
Chris Cell <ccell at home.com> wrote:
>This may be a rather green question, but what exactly would this do for you?
>Is it so the primary server only is responsible for zone transfers, and not
>answering to the outside world?

It will answer to the outside world, but only for the zones that it's
authoritative for; if someone queries it for names in some other domain, it
will return a referral up to the root servers.  This reduces cache
corruption (you can reduce it even further by using "fetch-glue no" as
well).

>> >I've recently setup BIND8 P5 on an OpenBSD box.  My question
>> >is how do I set things up that it is only an authoritative
>> >nameserver rather than answer resolution queries?
>>
>> options {
>>   recursion no;
>> };
>
>
>
>
>


-- 
Barry Margolin, barmar at genuity.net
Genuity, Burlington, MA
*** DON'T SEND TECHNICAL QUESTIONS DIRECTLY TO ME, post them to newsgroups.
Please DON'T copy followups to me -- I'll assume it wasn't posted to the group.