Allow recursion for esternal resources in a authoritative zone on a "not open" dns server

Mark Andrews marka at isc.org
Tue Nov 19 00:13:52 UTC 2013


In message <E81ED6071F7E3E44A69BC960C04469250C1A2001 at S-MI-MAIL2.milano.wkitaly.it>, "Chiesa Stefano" writes:
> Hello all.
> 
> I have a "closed" bind dns server. It answers only to queries related to
> zones it is authoritative for (a normal behaviour... right?).
> I have dns zones that contain cname that points to hostnames in domains
> not managed by that server.
> So it won't resolve that names returning the cname to the client.

This is correct operation.  Recursive/iterative servers talking to
it do not need your server to resolve the target of the cname.  They
will go ask the nameservers for the target of the cname themselves
then combine the two answers and return that to the caller.

Stub resolvers need to talk to a recursive server so it can do this
work on their behalf.

> I'd like to know if there is a way to tell to BIND "if the external
> resource is in a domain managed by you, resolve (do recourse)"
> 
> Do you know if it is possible?

No. 

> Thanks in advance,
> Stefano.
> 
> ----------------------------------------
> Stefano Chiesa
> Wolters Kluwer Italia
> Network Specialist
> Strada 1, Palazzo F6
> 20090 Milanofiori Assago (Mi) - Italia
> Phone +39 0282476279 (20279 Voip)
> Fax +39 0282476815
> 
> 
>  
> _______________________________________________
> Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list
> 
> bind-users mailing list
> bind-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: marka at isc.org


More information about the bind-users mailing list