Re: Hardening named.conf
On Wed, 28 Jan 2004, Mark Ferlatte wrote:
> options {
> allow-recursion {
> mydomain;
> };
> };
>
> This allows hosts in the mydomain acl to make recursive DNS queries, and blocks
> recursion for everyone else. Recursion is what allows bind to respond to
> requests for zones it's not actually hosting.
Not really. Bind will respond to any requests it actually KNOWS ABOUT,
including anything in its cache learned from clients for which recursion
is allowed.
--
"One disk to rule them all, One disk to find them. One disk to bring
them all and in the darkness grind them. In the Land of Redmond
where the shadows lie." -- The Silicon Valley Tarot
Henrique Holschuh
Reply to: