On Wed, 28 Jan 2004, Mark Ferlatte wrote:
> options {
>       allow-recursion {
>               mydomain;
>       };
> };
> 
> This allows hosts in the mydomain acl to make recursive DNS queries, and 
> blocks
> recursion for everyone else.  Recursion is what allows bind to respond to
> requests for zones it's not actually hosting.

Not really.  Bind will respond to any requests it actually KNOWS ABOUT,
including anything in its cache learned from clients for which recursion
is allowed.

-- 
  "One disk to rule them all, One disk to find them. One disk to bring
  them all and in the darkness grind them. In the Land of Redmond
  where the shadows lie." -- The Silicon Valley Tarot
  Henrique Holschuh

Reply via email to