<html><body><div style="color:#000; background-color:#fff; font-family:tahoma, new york, times, serif;font-size:10pt">As I understand AUTHORITATIVE trumps anything. For example, from an inside intranet name server forward the root (".") to somewhere on your edge, sprinkle in a few internal-only authoritative zones, and enjoy. This is certainly not the only choice, but it functions pretty well.<br><br>Len<br><div><span><br></span></div><div><br><blockquote style="border-left: 2px solid rgb(16, 16, 255); margin-left: 5px; margin-top: 5px; padding-left: 5px;"> <div style="font-family: tahoma, new york, times, serif; font-size: 10pt;"> <div style="font-family: times new roman, new york, times, serif; font-size: 12pt;"> <div dir="ltr"> <hr size="1"> <font face="Arial" size="2"> <b><span style="font-weight:bold;">From:</span></b> Jonathan Reed <cronstate@gmail.com><br> <b><span style="font-weight: bold;">To:</span></b> bind-users
<bind-users@lists.isc.org> <br> <b><span style="font-weight: bold;">Sent:</span></b> Sunday, June 2, 2013 12:10 PM<br> <b><span style="font-weight: bold;">Subject:</span></b> does zone trump forward?<br> </font> </div> <div class="y_msg_container"><br><meta http-equiv="x-dns-prefetch-control" content="off"><div id="yiv1021953273"><div dir="ltr"><span style="font-family:arial, sans-serif;font-size:13px;">I've only ever come across bind configs where forwarding is in place to locate certain zones, then all other queries are handled by either recursion or authoritatively. But what about the other way around, where I'm master for a few zones but forward the rest? Consider this:</span><div style="font-family:arial, sans-serif;font-size:13px;">
<br></div><div style="font-family:arial, sans-serif;font-size:13px;">view "the-internet" {</div><div style="font-family:arial, sans-serif;font-size:13px;"> recursion no;</div><div style="font-family:arial, sans-serif;font-size:13px;">
type forward;</div><div style="font-family:arial, sans-serif;font-size:13px;"> forwarders { 8.8.8.8; };</div><div style="font-family:arial, sans-serif;font-size:13px;"> zone "<a rel="nofollow" target="_blank" href="http://example.com/">example.com</a>" {<br>
</div><div style="font-family:arial, sans-serif;font-size:13px;"> type master</div><div style="font-family:arial, sans-serif;font-size:13px;"> file "<a rel="nofollow" target="_blank" href="http://example.com/">example.com</a>"</div>
<div style="font-family:arial, sans-serif;font-size:13px;"> ......</div><div style="font-family:arial, sans-serif;font-size:13px;">}</div><div style="font-family:arial, sans-serif;font-size:13px;"><br></div><div style="font-family:arial, sans-serif;font-size:13px;">
Whats confusing me is the implied configuration setting of forward first when the forward statement is used. If it truly forwards first, then I see an odd logical scenario happening. All queries are sent to the forwarder before being handled by localhost. Then, once the forwarder recognizes that I'm the master of <a rel="nofollow" target="_blank" href="http://example.com/">example.com</a>, why would a loop not occur if the forwarder matches this view?</div>
<div style="font-family:arial, sans-serif;font-size:13px;">To ask the question another way, does the zone statement take precedence on matching queries over any forwarding?</div><div style="font-family:arial, sans-serif;font-size:13px;">
<br></div><div style="font-family:arial, sans-serif;font-size:13px;">Thanks</div></div>
</div><meta http-equiv="x-dns-prefetch-control" content="on"><br>_______________________________________________<br>Please visit <a href="https://lists.isc.org/mailman/listinfo/bind-users" target="_blank">https://lists.isc.org/mailman/listinfo/bind-users</a> to unsubscribe from this list<br><br>bind-users mailing list<br><a ymailto="mailto:bind-users@lists.isc.org" href="mailto:bind-users@lists.isc.org">bind-users@lists.isc.org</a><br><a href="https://lists.isc.org/mailman/listinfo/bind-users" target="_blank">https://lists.isc.org/mailman/listinfo/bind-users</a><br><br></div> </div> </div> </blockquote></div> </div></body></html>