forwarding zone setup from a BIND slave (without recursion?)

[Matus UHLAR - fantomas]

On 06.04.21 22:47, RK K wrote:
>We have a set of BIND primary servers (MASTERs) and a set of secondary
>servers (slaves to the MASTERs).
>The secondary BIND DNS servers disabled recursion ( with "*recursion no;" *)
>in the global options.
>All the applications/systems do use secondary DNS servers for name
>resolution.
>
>Now there is a need to configure a forwarding zone in the "secondary DNS
>servers" to an external DNS server.
>
>In this scenario, in-order for the secondary server to forward the DNS
>query to an external DNS server, is it required to enable the recursion in
>the global options on the secondary servers?

yes.

>Based on reference material, I did not see such a requirement. But my
>observation is the query is not getting forwarded ( tried to check using
>the packet trace)
>When recursion is enabled, the query is getting forwarded.
>
>The BIND version I am using is 9.11.2.x.

-- 
Matus UHLAR - fantomas, uhlar at fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
It's now safe to throw off your computer.