Re: DNS Recursion

2005-09-15 Thread Kenneth E. Lussier
On Wed, 2005-09-14 at 21:22 -0400, Benjamin Scott wrote: If I understand you correctly: You did. allow-recursion is not the best choice for this. In the above, BIND will still attempt to answer queries, it just won't perform recursion to do so. In particular, the cache is still

DNS Recursion

2005-09-14 Thread Kenneth E. Lussier
Hi All, I'm using BIND8 (8.4.6) as an external name server. I want to also use it as the name server for my external boxes. However, I can't seem to get recursion to work correctly. If I use `allow-recursion {none; };` then dns lookups for my local zones works fine, but the external boxes can't

Re: DNS Recursion

2005-09-14 Thread Star
On 9/14/05, Kenneth E. Lussier [EMAIL PROTECTED] wrote: Hi All,I'm using BIND8 (8.4.6) as an external name server. I want to also useit as the name server for my external boxes. However, I can't seem toget recursion to work correctly.If I use `allow-recursion {none; };` then dns lookups for my

Re: DNS Recursion

2005-09-14 Thread Bill McGonigle
On Sep 14, 2005, at 11:34, Kenneth E. Lussier wrote: I tried `allow-recursion { x.x.x.x; };` (x.x.x.x = external NAT IP address), but the query was denied with: named[2692]: denied recursion for query from [x.x.x.x].24684 for www.google.com IN I'd expect the source of the UDP packet to be the

Re: DNS Recursion

2005-09-14 Thread Benjamin Scott
On Sep 14 at 11:34am, Kenneth E. Lussier wrote: I'm using BIND8 (8.4.6) as an external name server. I want to also use it as the name server for my external boxes. However, I can't seem to get recursion to work correctly. If I understand you correctly: You have a nameserver which is