Drop forwarded requests

[Barry Margolin]

In article <fis8t9$trj$1 at sf1.isc.org>, gagadget at free.fr wrote:

> Hi listers,
> 
> Is there a way to prevent BIND to answer frowarded requests ?
> 
> For local uses, somebody has setup a DNS on our network ( very large network 
> ),
> his server is forwarding all requests it can't answer. We asked him several
> times to shut down his server but he won't. For security reasons, we don't do
> forwarding on our servers so we would like to deny his forwarded requests
> without deny all his requests.

Do you mean you want to allow him to query your authoritative data, but 
not use you as a caching server?  Use "allow-recursion" and 
"allow-query-cache" to block him.
-- 
Barry Margolin
Arlington, MA