On Feb 29, 2008, at 9:21 AM, Abdullah Ibn Hamad Al-Marri wrote:
I need to make named do nslookup for any host from outside my network, but I faild to make it work as in older versions of BIND.

[17:20]([EMAIL PROTECTED])[~]> nslookup www.google.com ns3.wearab.net
Server:  NS3.WeArab.Net
Address:  66.90.105.114

Add:

  allow-recursion { any; };

...to the options section of named.conf. Note that this greatly increases the risk of people misusing the server via cache spoofing attacks; you are much better off specifying a more limited set of networks which are permitted to make recursive queries.

--
-Chuck

_______________________________________________
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Reply via email to