<html><head></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><div>If recursion is disabled, forwarding doesn't happen. I think you've confused some terms and configurations.</div><div><br></div><div>Don't use forwarding from a recursive server to a non-recursive server. Use a stub zone instead, if you can't rely on the recursion process to find the correct server to query.</div><div><br></div><div>If server 2 is auth-only or otherwise can't resolve the address of <a href="http://www.abc.com">www.abc.com</a>, then forwarding a query to it is not going to work. However, if server 1 is a caching server and is able to resolve <a href="http://www.abc.com">www.abc.com</a>, then using a stub zone for <a href="http://example.com">example.com</a> will work; server 2 will send the CNAME record to server 1, and then server 1 will resolve the final address record on its own.</div><div><br></div><div>Chris Buxton</div><div>BlueCat Networks</div><br><div><div>On May 5, 2011, at 2:15 AM, <<a href="mailto:iharrathi.ext@orange-ftgroup.com">iharrathi.ext@orange-ftgroup.com</a>> <<a href="mailto:iharrathi.ext@orange-ftgroup.com">iharrathi.ext@orange-ftgroup.com</a>> wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite">
<div style="WORD-WRAP: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space">
<div dir="ltr" align="left"><span class="144575708-05052011"><font face="Arial" color="#0000ff" size="2">Hi,</font></span></div>
<div dir="ltr" align="left"><span class="144575708-05052011"><font face="Arial" color="#0000ff" size="2">i have a server called server1 that is acting as a
cache server( recursion none). And i forward the zone <a href="http://example.com">example.com</a> to
server2 which has recursion enabled and master on some zone like
<a href="http://example.com">example.com</a>.</font></span></div>
<div dir="ltr" align="left"><span class="144575708-05052011"> <font face="Arial" color="#0000ff" size="2">this is the forwarding zone on server1:</font></span></div>
<div dir="ltr" align="left"><span class="144575708-05052011"><font face="Arial" color="#0000ff" size="2">zone "<a href="http://example.com">example.com</a>"
{<br> type
forward;<br> forward
only;<br> forwarders { IP_of
server2; };<br>};<br></font></span></div>
<div><span class="144575708-05052011"><font face="Arial" color="#0000ff" size="2">and
server2 is master of the zone <a href="http://example.com">example.com</a>:</font></span></div>
<div><span class="144575708-05052011"><font face="Arial" color="#0000ff" size="2"><br>zone "<a href="http://example.com">example.com</a>" {<br>
type master;<br> file
"master/db.example.com";<br>};</font></span></div>
<div><font face="Arial" color="#0000ff" size="2"></font> </div>
<div><font face="Arial" color="#0000ff" size="2"></font> </div>
<div><span class="144575708-05052011"><font face="Arial" color="#0000ff" size="2">BUT
the problem is here:</font></span></div>
<div><span class="144575708-05052011"><font face="Arial" color="#0000ff" size="2"><a href="http://db.example.com">db.example.com</a>:</font></span></div>
<div><span class="144575708-05052011"><font face="Arial" color="#0000ff" size="2">....</font></span></div>
<div><span class="144575708-05052011"><font face="Arial" color="#0000ff" size="2">$ORIGIN <a href="http://example.com">example.com</a>.</font></span></div>
<div><span class="144575708-05052011"><font face="Arial" color="#0000ff" size="2">www
A 1.2.3.4</font></span></div>
<div><span class="144575708-05052011"><font face="Arial" color="#0000ff" size="2">ftp
CNAME <a href="http://www.abc.com/">www.abc.com</a></font></span></div>
<div><span class="144575708-05052011"><font face="Arial" color="#0000ff" size="2"></font></span> </div>
<div><span class="144575708-05052011"><font face="Arial" color="#0000ff" size="2"></font></span> </div>
<div><span class="144575708-05052011"><font face="Arial" color="#0000ff" size="2"></font></span> </div>
<div><span class="144575708-05052011"><font face="Arial" color="#0000ff" size="2">server1 can resolve <a href="http://www.example.com/">www.example.com</a>,
but can't resolve <a href="ftp://ftp.example.com">ftp.example.com</a> since the
server2 sends the answer which is <a href="http://www.abc.com/">www.abc.com</a>
and not the IP, and my server1 can't make recursion to resolve <a href="http://www.abc.com/">www.abc.com</a>.</font></span></div>
<div><span class="144575708-05052011"><font face="Arial" color="#0000ff" size="2"></font></span> </div>
<div><span class="144575708-05052011"><font face="Arial" color="#0000ff" size="2">why?</font></span></div>
<div><span class="144575708-05052011"><font face="Arial" color="#0000ff" size="2">from
server1 when i dig on server2: dig @IP-server2 <a href="http://www.example.com/">www.example.com</a> it sends to me the IP, all is
OK!!! but with a forwarding statement it sends only the
CNAME</font></span></div>
<div><span class="144575708-05052011"><font face="Arial" color="#0000ff" size="2"></font></span> </div>
<div><font face="Arial" color="#0000ff" size="2"><span class="144575708-05052011">server1 is bind9.6-ESV-R4 et server2
bind-9.4.2</span></font></div>
<div><font face="Arial" color="#0000ff" size="2"><span class="144575708-05052011"></span></font> </div>
<div><font face="Arial" color="#0000ff" size="2"><span class="144575708-05052011">Thanks.</span></font></div>
<div><font face="Arial" color="#0000ff" size="2"><span class="144575708-05052011">Issam
HARRATHI</span></font></div>
<div><br></div>
<blockquote style="MARGIN-RIGHT: 0px">
<div class="OutlookMessageHeader" lang="fr" dir="ltr" align="left">
<hr tabindex="-1">
<font face="Tahoma" size="2"><b>De :</b> Chris Buxton
[mailto:chris.p.buxton@gmail.com] <br><b>Envoyé :</b> mercredi 4 mai 2011
08:49<br><b>À :</b> HARRATHI Issam Ext OLNC/DPS<br><b>Cc :</b>
<a href="mailto:bind-users@lists.isc.org">bind-users@lists.isc.org</a><br><b>Objet :</b> Re: forward first: iterative
or recursive query<br></font><br></div>
<div></div>
<div>With a static-stub zone, you would get an iterative query. Forwarding
always results in a recursive query.</div>
<div><br></div>
<div>How are you determining that your server is sending an iterative
query?</div>
<div><br></div>
<div>Can we (the list) see your named.conf?</div>
<div><br></div>
<div>Regards,</div>
<div>Chris Buxton</div>
<div>BlueCat Networks</div><br>
<div>
<div>On May 3, 2011, at 5:21 AM, <<a href="mailto:iharrathi.ext@orange-ftgroup.com">iharrathi.ext@orange-ftgroup.com</a>>
<<a href="mailto:iharrathi.ext@orange-ftgroup.com">iharrathi.ext@orange-ftgroup.com</a>>
wrote:</div><br class="Apple-interchange-newline">
<blockquote type="cite">
<div>
<div><font face="Arial" size="2"><span class="410301012-03052011">Hi</span></font></div>
<div><font face="Arial" size="2"><span class="410301012-03052011">from the book
DNS and Bind 5th edition [french] (o'reilly)</span></font></div>
<div><font face="Arial" size="2"><span class="410301012-03052011">I read that
the forward with the mode first sends a recursive query to the servers
on the forwarders list, but as i see it only sends an iterative query. Also
with forward only it send an itérative query.</span></font></div>
<div><font face="Arial" size="2"><span class="410301012-03052011">So forward first
send an itérative or recursive query?</span></font></div>
<div><font face="Arial" size="2"><span class="410301012-03052011"></span></font> </div>
<div><font face="Arial" size="2"><span class="410301012-03052011">And how i can
send a recursive query with the statement forward ( without using
static-stub)</span></font></div>
<div><font face="Arial" size="2"><span class="410301012-03052011">I'm using
bind-9.6-ESV-R4</span></font></div>
<div><font face="Arial" size="2"><span class="410301012-03052011"></span></font> </div>
<div><font face="Arial" size="2"><span class="410301012-03052011">Thanks.</span></font></div>
<div><font face="Arial" size="2"><span class="410301012-03052011">Issam
HARRATHI.</span></font></div><pre>********************************************************************************
IMPORTANT.Les informations contenues dans ce message electronique y compris les fichiers attaches sont strictement confidentielles
et peuvent etre protegees par la loi.
Ce message electronique est destine exclusivement au(x) destinataire(s) mentionne(s) ci-dessus.
Si vous avez recu ce message par erreur ou s il ne vous est pas destine, veuillez immediatement le signaler a l expediteur et effacer ce message
et tous les fichiers eventuellement attaches.
Toute lecture, exploitation ou transmission des informations contenues dans ce message est interdite.
Tout message electronique est susceptible d alteration.
A ce titre, le Groupe France Telecom decline toute responsabilite notamment s il a ete altere, deforme ou falsifie.
De meme, il appartient au destinataire de s assurer de l absence de tout virus.
IMPORTANT.This e-mail message and any attachments are strictly confidential and may be protected by law. This message is
intended only for the named recipient(s) above.
If you have received this message in error, or are not the named recipient(s), please immediately notify the sender and delete this e-mail message.
Any unauthorized view, usage or disclosure ofthis message is prohibited.
Since e-mail messages may not be reliable, France Telecom Group shall not be liable for any message if modified, changed or falsified.
Additionally the recipient should ensure they are actually virus free.
********************************************************************************
</pre></div>_______________________________________________<br>bind-users
mailing list<br><a href="mailto:bind-users@lists.isc.org">bind-users@lists.isc.org</a><br><a href="https://lists.isc.org/mailman/listinfo/bind-users">https://lists.isc.org/mailman/listinfo/bind-users</a></blockquote></div><br></blockquote><pre>********************************************************************************
IMPORTANT.Les informations contenues dans ce message electronique y compris les fichiers attaches sont strictement confidentielles
et peuvent etre protegees par la loi.
Ce message electronique est destine exclusivement au(x) destinataire(s) mentionne(s) ci-dessus.
Si vous avez recu ce message par erreur ou s il ne vous est pas destine, veuillez immediatement le signaler a l expediteur et effacer ce message
et tous les fichiers eventuellement attaches.
Toute lecture, exploitation ou transmission des informations contenues dans ce message est interdite.
Tout message electronique est susceptible d alteration.
A ce titre, le Groupe France Telecom decline toute responsabilite notamment s il a ete altere, deforme ou falsifie.
De meme, il appartient au destinataire de s assurer de l absence de tout virus.
IMPORTANT.This e-mail message and any attachments are strictly confidential and may be protected by law. This message is
intended only for the named recipient(s) above.
If you have received this message in error, or are not the named recipient(s), please immediately notify the sender and delete this e-mail message.
Any unauthorized view, usage or disclosure ofthis message is prohibited.
Since e-mail messages may not be reliable, France Telecom Group shall not be liable for any message if modified, changed or falsified.
Additionally the recipient should ensure they are actually virus free.
********************************************************************************
</pre></div>
</blockquote></div><br></body></html>