On 2013-05-21 04:57, Elmar K. Bins wrote:
... these annoying root lookups:
error (host unreachable) resolving './DNSKEY/IN': 192.112.36.4#53
error (host unreachable) resolving './NS/IN': 192.36.148.17#53
...
Hi guys,
I guess a few of you have seen and mitigated this before. We're
running
a few BIND server strictly internally - for master zone loading,
actually.
Those servers have no external connectivity. Since they seem to
routinely
look up stuff concerning ".", I get a lot of the above error messages
due
to - certainly - unreachability of anything outside local.
Is there any way I can get those BIND9 servers to *not* look up root
stuff?
Recursion is off, and the root hints file has been removed from the
local
zone config. No effect.
Any pointers would be much appreciated.
...
1 PTR localhost
Seriously, some ways to redirect root are:
- root.cache file naming your internal root servers, if any, and a
hint root zone
- master root zone that is empty [except for SOA and NS]
- forward external lookups to external name servers
Or compile it excluding the built-in root hints file.
As far as the DNSKEY, is it possible that you have root's key still in
your configuration, and that's why it's trying to look it up?
Joe Yao
_______________________________________________
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe
from this list
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users
