Private Zones and Deligation bind9.7.2

Chris Buxton chris.p.buxton at gmail.com
Mon Dec 6 19:29:56 UTC 2010


On Dec 6, 2010, at 9:30 AM, Martin McCormick wrote:

> Barry Margolin writes:
> 
>> Do you have recursion enabled on your server?
> 
> 	A good question. I have never explisitly disabled it and
> it appears to be on.

The default ACL for allow-recursion is { localhost; localnets; }. That means it will work for clients on the same networks as your server, but not for other networks.

In your options or view statement, add this:

	allow-recursion { localhost; network1; networks2; [...] };

Instead of "network1", put in the definition of the allowed network, such as "10/8" or "192.168.0/24". You can also use a named ACL, such as one defined with the "acl" statement.

Regards,
Chris Buxton
BlueCat Networks


More information about the bind-users mailing list