DNS Security

Kevin Darcy kcd at daimlerchrysler.com
Tue Jan 4 23:12:12 UTC 2000


Cricket Liu wrote:

> You can't turn on recursion for a particular zone.  You must
> be confusing the "allow-recursion" and "allow-query"
> substatements.  The zone statement doesn't support an
> "allow-recursion" substatement substatement.
>
> Moreover, it wouldn't make any sense to have one.  What
> would it mean for a name server to do recursive resolution
> for a zone it's authoritative for?

Not all "zone" statements define authoritative zones, though. They can also
define forward or stub zones and theoretically, one might wish to control
recursion for such zones. (By no means am I lobbying for an allow-recursion
zone option; I'm just pointing out the theoretical possibility).


- Kevin





More information about the bind-users mailing list