Does it need to set allow-recursion?

WebReactor Networks bind at webreactor.net
Tue Mar 5 18:18:05 UTC 2002


According to < 
http://www.isc.org/products/BIND/docs/config/address_list.html > you should
be able to reference your dial-up network(s) with CIDR notation.  Assuming
that your dial-up users are using your dial-up service, then you can allow
their address block like this:

allow-recursion { 192.168.1.0/24; };

  - John R. S. 


> From: xiao at info.sta.net.cn (David Xiao)
> Organization: http://groups.google.com/
> Newsgroups: comp.protocols.dns.bind
> Date: 5 Mar 2002 00:43:05 -0800
> To: comp-protocols-dns-bind at isc.org
> Subject: Does it need to set allow-recursion?
> 
> Someone tell me in order to improve my nameserver's security.
> I should set allow-recursion options to my nameserver.
> BUT I have many dail-up users who use my nameserver.
> Does it really necessary to set so many ip-addresses?
> And How to set??



More information about the bind-users mailing list