Recursion issue

Manson, John John.Manson at
Thu Mar 28 16:05:38 UTC 2013

I disagree with your statement about recursion.
What stops an authoritative server from doing recursion if you do not have the recursion statement?
I guess the bind default is recursion yes.

-----Original Message-----
From: Chris Buxton [mailto:clists at] 
Sent: Thursday, March 28, 2013 11:49 AM
To: Manson, John
Cc: bind-users at
Subject: Re: Recursion issue

On Mar 28, 2013, at 8:27 AM, Manson, John wrote:

> From the internet:
> Answer records
> name	class	type	data	time to live
> Testwww from the internet:
> Answer records
> name	class	type	data	time to live
>	IN	A	900s	(00:15:00)
> So the first lookup does not fully resolve due to recursion.
> Does this help?

Yes it does. It just doesn't all get answered from the one zone. Both of your public servers, chyron and mercury, contain both zones. A non-recursive query to either of them gets both records in an authoritative answer.

$ dig +norec

; <<>> DiG 9.7.6-P1 <<>> +norec ;; global options: +cmd ;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 26756 ;; flags: qr aa; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 0

;		IN	A


;; Query time: 100 msec
;; SERVER: ;; WHEN: Thu Mar 28 08:45:23 2013 ;; MSG SIZE  rcvd: 80

There is no need to configure recursion on your external authoritative name servers. Other name servers will not query them recursively anyway.

I continue to fail to see the problem that you're trying to solve.

Chris Buxton
BlueCat Networks

More information about the bind-users mailing list