Internal Root and glue records

Mark_Andrews at isc.org Mark_Andrews at isc.org
Tue Dec 3 23:00:06 UTC 2002


> 
> We are running an internal dns server with its own root zone (Bind
> 8.3.4). The question that came up is the following:
> 
> Is it mandatory to put a glue record in the root zone for a server, even
> though this server is in a zone on the same dns server (that is, where
> the same dns server is authoritative)?

	While you can get away with it with BIND 8 (as it leaks information
	between zones) it really should be there.  If you use a server that
	doesn't leak zone contents (like BIND 9) other root servers won't
	know how to reach mydomain.com.

	Mark
 
> Example:
> 
> named.conf (excerpt):
> 
> zone "." {
> 		type master;
> 		file "db.iroot";
> };
> 
> zone "mydomain.com {
> 		type master;
> 		file "db.mydomain.com";
> };
> 
> 
> root-zone (db.iroot, excerpt):
> 
> ....
> 
> mydomain.com.		IN NS ns.mydomain.com.
> ns.mydomain.com.	IN A 123.45.67.89
> 
> ....
> 
> Question: is the above A-Record necessary???
> 
> Best regards
> 
> Joerg Lehmann
--
Mark Andrews, Internet Software Consortium
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: Mark.Andrews at isc.org


More information about the bind-users mailing list