Force Recursion
Marco Moock
mm at dorfdsl.de
Sat Feb 21 05:32:48 UTC 2026
On 20.02.2026 22:18 Karol Nowicki via bind-users
<bind-users at lists.isc.org> wrote:
> Client sending query to DNS Resolver for google.com.DNS Resolver
> cached from internal root hints that google.com is delegated to DNS
> proxy server ( NS record ). DNS proxy is having locall information
> that google.com has to be delegated to public google name server
> 8.8.8.8 Query from DNS Resolver to DNS proxy server is being sent
> with disabled recursion flag as google.com is defined with NS record.
> Client -> DNS Caching Recursive Resolver -> DNS "Proxy" Server ->
> Public Google DNS
Why do you want to do this? Forging DNS records of foreign domains has
always been a nasty behaviour. If you want a machine that can be used
as a DNS server that forwards all queries to another machine, you are
looking for a so called stub-resolver. BIND can be configured for that
case. You need to enter the target servers as forwarders.
That will cause BIND to forward all queries with recursion desired flag
and cache them.
--
kind regards
Marco
Send spam to abfall1771622302 at stinkedores.dorfdsl.de
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 870 bytes
Desc: Digitale Signatur von OpenPGP
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20260221/3bbcdb9e/attachment.sig>
More information about the bind-users
mailing list