You have recursion set to no. So the only thing the DNS server will answer for is zones it is authoritative for. If you want to use it as a DNS server for clients, you need to allow recursionfor an ACL that has the IP address space that your clients are coming from. Here's an example:<br>
<span class="postbody"><pre style="overflow: auto; width: 95%; max-height: 350px;">acl "trusted" {<br> <a href="http://192.168.0.0/16">192.168.0.0/16</a>;<br> <a href="http://10.153.154.0/24">10.153.154.0/24</a>;<br>
localhost;<br> localnets;<br> };<br> <br> options {<br> ...<br> allow-query { any; };<br> allow-recursion { trusted; };<br> allow-query-cache { trusted; };<br> ...<br> };<br></pre></span><br><br>
<div class="gmail_quote">On Sat, Nov 15, 2008 at 7:36 AM, Ian Gregson <span dir="ltr"><<a href="mailto:contact@iangregson.com">contact@iangregson.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
<div link="blue" vlink="purple" lang="ES">
<div>
<p>Hi there,</p>
<p> </p>
<p><span lang="EN-US">Can anyone help? I finally managed to
configure bind on Windows and it seems to be working ok but most of the
external addresses (i.e. <a href="http://yahoo.com" target="_blank">yahoo.com</a>, <a href="http://google.com" target="_blank">google.com</a> etc) do not resolve.</span></p>
<p><span lang="EN-US"> </span></p>
<p><span lang="EN-US">The crazy thing is .. some I can browser
with firefox but NOT many, i.e. <a href="http://experts-exchange.com" target="_blank">experts-exchange.com</a>, <a href="http://linux.derkeiler.com" target="_blank">linux.derkeiler.com</a> work
OK</span></p>
<p><span lang="EN-US"> </span></p>
<p><span lang="EN-US">I presume its working off some kind of
cache… </span></p>
<p><span lang="EN-US"> </span></p>
<p><span lang="EN-US">What I did do was downloaded the named.root
file and placed it in etc (see my named.conf for config "." Zone -
I have placed after this).</span></p>
<p><span lang="EN-US"> </span></p>
<p><span lang="EN-US">I think the issue is with the root servers
not resolving as I ran a trace using dig and get this back … even for
<a href="http://experts-exchange.com" target="_blank">experts-exchange.com</a> (which resolves in firefox), I am really lost… Heres
the output from dig using the +trace … and here is my named.conf …</span></p>
<p><span lang="EN-US"> </span></p>
<p><span lang="EN-US">Any help really appreciated, basically my
idea is .. to check if the domain exists locally and if not forward to another dns
server to have it resolved</span></p>
<p><span lang="EN-US"> </span></p>
<p><span lang="EN-US">C:\Windows\SysWOW64\dns\bin>dig +trace
<a href="http://experts-exchange.com" target="_blank">experts-exchange.com</a></span></p>
<p><span lang="EN-US"> </span></p>
<p><span lang="EN-US">; <<>> DiG 9.5.0-P2-W2
<<>> +trace <a href="http://experts-exchange.com" target="_blank">experts-exchange.com</a></span></p>
<p><span lang="EN-US">;; global options: printcmd</span></p>
<p><span lang="EN-US">. 3600000 IN
NS <a href="http://H.ROOT-SERVERS.NET" target="_blank">H.ROOT-SERVERS.NET</a>.</span></p>
<p><span lang="EN-US">. 3600000 IN
NS <a href="http://L.ROOT-SERVERS.NET" target="_blank">L.ROOT-SERVERS.NET</a>.</span></p>
<p><span lang="EN-US">. 3600000 IN
NS <a href="http://C.ROOT-SERVERS.NET" target="_blank">C.ROOT-SERVERS.NET</a>.</span></p>
<p><span lang="EN-US">. 3600000 IN
NS <a href="http://J.ROOT-SERVERS.NET" target="_blank">J.ROOT-SERVERS.NET</a>.</span></p>
<p><span lang="EN-US">. 3600000 IN
NS <a href="http://G.ROOT-SERVERS.NET" target="_blank">G.ROOT-SERVERS.NET</a>.</span></p>
<p><span lang="EN-US">. 3600000 IN
NS <a href="http://K.ROOT-SERVERS.NET" target="_blank">K.ROOT-SERVERS.NET</a>.</span></p>
<p><span lang="EN-US">. 3600000 IN
NS <a href="http://I.ROOT-SERVERS.NET" target="_blank">I.ROOT-SERVERS.NET</a>.</span></p>
<p><span lang="EN-US">. 3600000 IN
NS <a href="http://M.ROOT-SERVERS.NET" target="_blank">M.ROOT-SERVERS.NET</a>.</span></p>
<p><span lang="EN-US">. 3600000 IN
NS <a href="http://D.ROOT-SERVERS.NET" target="_blank">D.ROOT-SERVERS.NET</a>.</span></p>
<p><span lang="EN-US">. 3600000 IN
NS <a href="http://B.ROOT-SERVERS.NET" target="_blank">B.ROOT-SERVERS.NET</a>.</span></p>
<p><span lang="EN-US">. 3600000 IN
NS <a href="http://A.ROOT-SERVERS.NET" target="_blank">A.ROOT-SERVERS.NET</a>.</span></p>
<p><span lang="EN-US">. 3600000 IN
NS <a href="http://E.ROOT-SERVERS.NET" target="_blank">E.ROOT-SERVERS.NET</a>.</span></p>
<p><span lang="EN-US">. 3600000 IN
NS <a href="http://F.ROOT-SERVERS.NET" target="_blank">F.ROOT-SERVERS.NET</a>.</span></p>
<p><span lang="EN-US">;; Received 228 bytes from
<a href="http://127.0.0.1#53%28127.0.0.1%29" target="_blank">127.0.0.1#53(127.0.0.1)</a> in 39 ms</span></p>
<p><span lang="EN-US"> </span></p>
<p><span lang="EN-US">dig: couldn't get address for
'<a href="http://E.ROOT-SERVERS.NET" target="_blank">E.ROOT-SERVERS.NET</a>': not found</span></p>
<p><span lang="EN-US"> </span></p>
<p><span lang="EN-US">C:\Windows\SysWOW64\dns\bin></span></p>
<p><span lang="EN-US"> </span></p>
<p style=""><span style="font-size: 10pt; font-family: "Courier New";" lang="EN-US">options {</span></p>
<p style=""><span style="font-size: 10pt; font-family: "Courier New";" lang="EN-US"> directory
"c:\windows\SysWOW64\dns\etc";</span></p>
<p style=""><span style="font-size: 10pt; font-family: "Courier New";" lang="EN-US"> version "not
currently available";</span></p>
<p style=""><span style="font-size: 10pt; font-family: "Courier New";" lang="EN-US"> pid-file
"run\named.pid";</span></p>
<p style=""><span style="font-size: 10pt; font-family: "Courier New";" lang="EN-US"> allow-transfer { none;
};</span></p>
<p style=""><span style="font-size: 10pt; font-family: "Courier New";" lang="EN-US"> recursion no;</span></p>
<p style=""><span style="font-size: 10pt; font-family: "Courier New";" lang="EN-US"> </span><span style="font-size: 10pt; font-family: "Courier New";">forwarders { <a href="http://208.67.222.222" target="_blank">208.67.222.222</a>;
<a href="http://208.67.220.220" target="_blank">208.67.220.220</a>; };</span></p>
<p style=""><span style="font-size: 10pt; font-family: "Courier New";"> forward only;</span></p>
<p style=""><span style="font-size: 10pt; font-family: "Courier New";">};</span></p>
<p style=""><span style="font-size: 10pt; font-family: "Courier New";"> </span></p>
<p style=""><span style="font-size: 10pt; font-family: "Courier New";" lang="EN-US">logging{</span></p>
<p style=""><span style="font-size: 10pt; font-family: "Courier New";" lang="EN-US"> channel my_log{</span></p>
<p style=""><span style="font-size: 10pt; font-family: "Courier New";" lang="EN-US"> file
"log\named.log" versions 3 size 250k;</span></p>
<p style=""><span style="font-size: 10pt; font-family: "Courier New";" lang="EN-US"> severity info;</span></p>
<p style=""><span style="font-size: 10pt; font-family: "Courier New";" lang="EN-US"> };</span></p>
<p style=""><span style="font-size: 10pt; font-family: "Courier New";" lang="EN-US"> category default{</span></p>
<p style=""><span style="font-size: 10pt; font-family: "Courier New";" lang="EN-US"> my_log;</span></p>
<p style=""><span style="font-size: 10pt; font-family: "Courier New";" lang="EN-US"> };</span></p>
<p style=""><span style="font-size: 10pt; font-family: "Courier New";" lang="EN-US">};</span></p>
<p style=""><span style="font-size: 10pt; font-family: "Courier New";" lang="EN-US"> </span></p>
<p style=""><span style="font-size: 10pt; font-family: "Courier New";" lang="EN-US">zone "." {</span></p>
<p style=""><span style="font-size: 10pt; font-family: "Courier New";" lang="EN-US">type hint;</span></p>
<p style=""><span style="font-size: 10pt; font-family: "Courier New";" lang="EN-US">file "named.root";</span></p>
<p style=""><span style="font-size: 10pt; font-family: "Courier New";" lang="EN-US">}; </span></p>
<p style=""><span style="font-size: 10pt; font-family: "Courier New";" lang="EN-US"> </span></p>
<p style=""><span style="font-size: 10pt; font-family: "Courier New";" lang="EN-US">zone
"<a href="http://mylocalemail.com" target="_blank">mylocalemail.com</a>" IN {</span></p>
<p style=""><span style="font-size: 10pt; font-family: "Courier New";" lang="EN-US"> type master;</span></p>
<p style=""><span style="font-size: 10pt; font-family: "Courier New";" lang="EN-US"> file
"zones\db.mylocalemail.com.txt";</span></p>
<p style=""><span style="font-size: 10pt; font-family: "Courier New";" lang="EN-US"> allow-transfer { none;
};</span></p>
<p style=""><span style="font-size: 10pt; font-family: "Courier New";" lang="EN-US">};</span></p>
<p style=""><span style="font-size: 10pt; font-family: "Courier New";" lang="EN-US"> </span></p>
<p style=""><span style="font-size: 10pt; font-family: "Courier New";" lang="EN-US">key "rndc-key" {</span></p>
<p style=""><span style="font-size: 10pt; font-family: "Courier New";" lang="EN-US"> algorithm hmac-md5;</span></p>
<p style=""><span style="font-size: 10pt; font-family: "Courier New";" lang="EN-US"> secret "whaaa2JlhJJFWWDQbaGSSA3BA==";</span></p>
<p style=""><span style="font-size: 10pt; font-family: "Courier New";" lang="EN-US">};</span></p>
<p style=""><span style="font-size: 10pt; font-family: "Courier New";" lang="EN-US"> </span></p>
<p style=""><span style="font-size: 10pt; font-family: "Courier New";" lang="EN-US">controls {</span></p>
<p style=""><span style="font-size: 10pt; font-family: "Courier New";" lang="EN-US"> inet <a href="http://127.0.0.1" target="_blank">127.0.0.1</a> port
953</span></p>
<p style=""><span style="font-size: 10pt; font-family: "Courier New";" lang="EN-US"> </span><span style="font-size: 10pt; font-family: "Courier New";">allow { <a href="http://127.0.0.1" target="_blank">127.0.0.1</a>; } keys {
"rndc-key"; };</span></p>
<p style=""><span style="font-size: 10pt; font-family: "Courier New";">};</span></p>
<p style=""><span style="font-size: 10pt; font-family: "Courier New";"> </span></p>
<p style=""><span style="font-size: 10pt; font-family: "Courier New";"> </span></p>
<p style=""><span style="font-size: 10pt; font-family: "Courier New";"> </span></p>
<p><span lang="EN-US"> </span></p>
<p><span lang="EN-US"> </span></p>
<p><span lang="EN-US"> </span></p>
<p><span lang="EN-US"> </span></p>
<p><span lang="EN-US"> </span></p>
</div>
</div>
<br>_______________________________________________<br>
Bind-users mailing list<br>
<a href="mailto:Bind-users@lists.isc.org">Bind-users@lists.isc.org</a><br>
<a href="https://lists.isc.org/mailman/listinfo/bind-users" target="_blank">https://lists.isc.org/mailman/listinfo/bind-users</a><br></blockquote></div><br><br clear="all"><br>-- <br>Google for President<br>YouTube for VP<br>
in any year divisible by 4<br><br>