Recursion no

Nick Allum Nick.Allum at
Thu Nov 16 15:23:51 UTC 2006

Do you know how you would go about locking down your advertisitng DNS
Servers by turning recursion off but still allowing some CNAME's to
resolve to other external non authorative.

For example you are advertising the domain

In the zone file it contains

Test		IN	A
More		IN	A
Again		IN	A
Nice		IN	A
Outside	IN	CNAME

The hostname Will not resolve as my servers is non
recursive, also Will also not resolve. How would I be
able to work around this situation in order to protect my dns server
from performing recursive lookups to the rest of the world.


More information about the bind-users mailing list