Does it need to set allow-recursion?

Barry Margolin barmar at genuity.net
Tue Mar 5 18:12:17 UTC 2002


In article <a62s7g$qgm at pub3.rc.vix.com>,
David Xiao <xiao at info.sta.net.cn> wrote:
>
>Someone tell me in order to improve my nameserver's security.
>I should set allow-recursion options to my nameserver.
>BUT I have many dail-up users who use my nameserver.
>Does it really necessary to set so many ip-addresses?

If all your dialup addresses are in the same address range, you should be
able to use CIDR notation to allow them all at once, e.g.

allow-recursion { 192.168.24.0/24; };

-- 
Barry Margolin, barmar at genuity.net
Genuity, Woburn, MA
*** DON'T SEND TECHNICAL QUESTIONS DIRECTLY TO ME, post them to newsgroups.
Please DON'T copy followups to me -- I'll assume it wasn't posted to the group.


More information about the bind-users mailing list