recursion control clarification request

[Dave]

Hi.
I am upgrading a 4.9.7 box to 8.2.2-P5 and I have a question regarding
recursion control. The current 4.9.7 box is getting hammered with recursive
lookups from non-client domains.

In order to stop this using 8.2.2-P5, Can I simply do the following:

(examples taken from the archive, thanks Barry)

allow-recursion { x.x.x.x; x.x.x.x; };
fetch-glue no;

or would this be better:

acl my-users { 192.168.10.0/24; 172.18.0.0/16; };

             options {
               allow-query { my-users; };
               ...
             };

             zone "something.com" {
               ...
               allow-query { any; };
             };

             zone "someone-else.org" {
               ...
               allow-query { any; };
             };

Sorry for my confusion, but I am not quite clear on the pros/cons of the two
approaches.

Clarification much appreciated.
Thanks,
Dave


+++++++++++++++++++++++++++++++++++++
Sir, are you classified as human?
"Ah, negative. I am a meat popsicle"
+++++++++++++++++++++++++++++++++++++