Recursion with in authoritative zone

Do, Ho cao (NIH/CIT) doh at mail.nih.gov
Fri Dec 20 17:10:08 UTC 2002


NS.domainA.com (BIND 9.2.1) is an authoritative server for the domainA.com. 
NS.domainA.com's configuration file does not allow recursive query by
implementing the ACL list: "allow-recursion {recursive-list;};".

Every thing successfully performs as expected.  
Then the admin from domainB.com would like NS.domainA.com hosting
domainB.com as a secondary name-server for domainB.com.  Unfortunately, the
domainB.com zone also has a sub1.domainB.com which was delegated to
NS.sub1.domainB.com.

When the internet users query host1.sub1.domainB.com in name-server
NS.domainA.com, NS.domainA.com refuses to answer because it is not
authoritative for any host in the sub domain (sub1.domainB.com).

The question is:

1-Is there any option that can turn on recursive query for a specific
sub-domain?  Realize that in this particular situation, the secondary server
is authoritative for the domain not for the sub-domain.
For Example:
in the zone file on the primary name-server of domainB.com state that:
	domainB.com. IN NS NS.domainA.com.
	...
	sub1.domainB.com. IN NS NS.sub1.domainB.com.
	NS.sub1.domainB.com. IN A 123.231.123.231 (this is a fake IP)

Therefore, even though the NS.domainA.com is authoritative for domainB.com,
it does not have a record for host1.sub1.domainB.com.  In order to answer
the query for host1.sub1.domainB.com, NS.domainA.com has to do recursive
query that NS.domainA.com has instructed not to do so.

Please accept my apologize for my poor English.

Sincerely,

Ho Cao Do

(301)480-6041   Fax



More information about the bind-users mailing list