query question

Barry Margolin barmar at genuity.net
Tue Jul 31 16:41:51 UTC 2001


In article <9jktmv$o5c at pub3.rc.vix.com>,
Kevin Darcy  <kcd at daimlerchrysler.com> wrote:
>How do you expect to host a domain if you don't let everyone query your
>nameserver?
>
>Set a global allow-query, restricted to only your internal clients, and
>then override it with "allow-query { any; };" in each of the zones that
>you host.

A simpler solution is to use the allow-recursion option.  Queries in
domains you serve don't require recursion, while local clients' resolvers
will send recursive queries.

-- 
Barry Margolin, barmar at genuity.net
Genuity, Woburn, MA
*** DON'T SEND TECHNICAL QUESTIONS DIRECTLY TO ME, post them to newsgroups.
Please DON'T copy followups to me -- I'll assume it wasn't posted to the group.


More information about the bind-users mailing list