# [EMAIL PROTECTED] / 2003-01-06 17:36:52 +0100:
> ! > Background: This environment should be configured to use
> ! > an internet connection for internet-relevant things, but to
> ! > work flawlessly without such a connection as long as matters
> ! > do concern only systems within the LAN.
> ! 
> ! This is called a "split horizon DNS", and you need to run two
> ! DNS servers, one interior, and one exterior, both authoritative
> ! for your domain, in order for this to work.  The problem is that
> ! you are forwarding a request that should be local, and you are
> ! doing it because your local server does not pass the authority
> ! test for your local domain.
> 
> Well, I think I got it now. What I did not know was that any
> nameserver installation is expected to always have some kind
> of root nameserver accessible (either the real ones from the
> internet, or elseways a local shortcut) in order to function
> properly.

    This is wrong in at least two ways.

    An authoritative content server doesn't need to know root servers,
    because they're out of it's business.

    A non-recursive (forwarding-only) resolver doesn't need to know
    root servers, just the upstream resolver it forwards all requests
    to.


-- 
If you cc me or remove the list(s) completely I'll most likely ignore
your message.    see http://www.eyrie.org./~eagle/faqs/questions.html

To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-hackers" in the body of the message

Reply via email to