<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<p>Hi Sonal,</p>
<p>I do not think forwarders specified in zone work as fixed order.
It would not work by first contacting 127.0.0.1, if that did not
deliver the answer, try 199.165.24.21. Forwarders in bind are
configured as a set, not ordered list. It would use whatever just
gives faster replies.</p>
<p>I am afraid BIND does not work similar to /etc/resolv.conf, where
such approach might work. It expects authoritative server for the
zone can be found and produces the answer. Which is only cached by
named. It expects any configured forwarder would get the same
answer, just how fast it is would be measured.</p>
<p>I think more correct would be setting more specific zones of
e164.arpa configured with only one forwarder.</p>
<p>Regards,<br>
Petr<br>
</p>
<div class="moz-cite-prefix">On 9/29/21 09:21, Sonal Pahuja wrote:<br>
</div>
<blockquote type="cite"
cite="mid:MWHPR1001MB21413CA279A96C7C7E1A43F9A8A99@MWHPR1001MB2141.namprd10.prod.outlook.com">
<meta name="Generator" content="Microsoft Word 15 (filtered
medium)">
<div class="WordSection1">
<p class="MsoNormal">Hi All,</p>
<p class="MsoNormal"> </p>
<p class="MsoNormal">Is there any option to set recursion =1 in
named.conf file for the zone. I just want bind9 to do
recursion only once.</p>
<p class="MsoNormal">If bind9 receives answer from one of the
forwarders then it should not do recursion (forward query) to
any other forwarder IP.</p>
<p class="MsoNormal"> </p>
<p class="MsoNormal">Below is my snapshot of my named.conf file</p>
<p class="MsoNormal"> </p>
<p class="MsoNormal">options {</p>
<p class="MsoNormal"> listen-on port 53 { any; };</p>
<p class="MsoNormal"> listen-on-v6 port 53 { any; };</p>
<p class="MsoNormal"> directory "/var/named";</p>
<p class="MsoNormal"> dump-file
"/var/named/data/cache_dump.db";</p>
<p class="MsoNormal"> statistics-file
"/var/named/data/named.stats";</p>
<p class="MsoNormal"> memstatistics-file
"/var/named/data/named_mem_stats.txt";</p>
<p class="MsoNormal"> allow-query { localhost;
!blocked; allowed; };</p>
<p class="MsoNormal">// allow-query { localhost; };</p>
<p class="MsoNormal"> recursion yes;</p>
<p class="MsoNormal"> zone-statistics yes;</p>
<p class="MsoNormal"> dnssec-enable no;</p>
<p class="MsoNormal"> dnssec-validation no;</p>
<p class="MsoNormal">auth-nxdomain no;</p>
<p class="MsoNormal"> // additional-from-auth no;</p>
<p class="MsoNormal"> // additional-from-cache no;</p>
<p class="MsoNormal"> /* Path to ISC DLV key */</p>
<p class="MsoNormal"> bindkeys-file
"/etc/named.iscdlv.key";</p>
<p class="MsoNormal"> </p>
<p class="MsoNormal"> managed-keys-directory
"/var/named/dynamic";</p>
<p class="MsoNormal"> </p>
<p class="MsoNormal"> </p>
<p class="MsoNormal">};</p>
<p class="MsoNormal">zone "e164.arpa" IN {</p>
<p class="MsoNormal">type forward ;</p>
<p class="MsoNormal">forwarders { 127.0.0.1 port 49153;
199.165.24.21 port 49153; };</p>
<p class="MsoNormal">forward only;</p>
<p class="MsoNormal">};</p>
<p class="MsoNormal"> </p>
<p class="MsoNormal">Regards,</p>
<p class="MsoNormal">Sonal</p>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<pre class="moz-quote-pre" wrap="">_______________________________________________
Please visit <a class="moz-txt-link-freetext" href="https://lists.isc.org/mailman/listinfo/bind-users">https://lists.isc.org/mailman/listinfo/bind-users</a> to unsubscribe from this list
ISC funds the development of this software with paid support subscriptions. Contact us at <a class="moz-txt-link-freetext" href="https://www.isc.org/contact/">https://www.isc.org/contact/</a> for more information.
bind-users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:bind-users@lists.isc.org">bind-users@lists.isc.org</a>
<a class="moz-txt-link-freetext" href="https://lists.isc.org/mailman/listinfo/bind-users">https://lists.isc.org/mailman/listinfo/bind-users</a>
</pre>
</blockquote>
<pre class="moz-signature" cols="72">--
Petr Menšík
Software Engineer
Red Hat, <a class="moz-txt-link-freetext" href="http://www.redhat.com/">http://www.redhat.com/</a>
email: <a class="moz-txt-link-abbreviated" href="mailto:pemensik@redhat.com">pemensik@redhat.com</a>
PGP: DFCF908DB7C87E8E529925BC4931CA5B6C9FC5CB</pre>
</body>
</html>