Need a little help with recursion in Bind

Chris Dibble Chris.Dibble at gov.ab.ca
Tue Dec 4 17:34:48 UTC 2007


> Hello, I was wondering if there are any problems with the
> "allow-recursion{ acl }" command in Bind 9.2.2. 
> Im not sure what is wrong, but I cannot restrict recursion to
> specified IP addresses. The only way I can say no to recursion is to
> use "recursion no;"... Is there something I am doing wrong? Thanks for
> any insight... C.
> 
> I am using the following method below and it still allows recursive
> lookups to everyone:
> 
> 
> 
> //only these addreses should be allowed recursion
> 
> acl recurseallow {
> 143.229.0.0/16; 193.213.0.0/16; 193.214.0.0/15; 193.161.6.0/24;
> };
> 
> 
> 
> options {
>         directory "/etc/named.zone";
>         
>         pid-file "/var/log/named/named.pid";
> 
>         statistics-file "/var/log/named/named.stats";
> 
>         recursive-clients 2000;
> 
>         transfer-source 143.229.194.2;
> 
>         additional-from-cache yes;
> 
>         recursion no;
> 
>         allow-recursion { recurseallow; };
> 
>         version "Restricted";
> };
> 
> 
> 
> 
This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail.




More information about the bind-users mailing list