turning on recursion in bind 9.2.2 makes ssh login prompt slow

[Alan Clegg]

Alan Clegg wrote:
> r37ribution at gmail.com wrote:
>> FYI, this DNS server is on an isolated network so it doesn't need to get out
>> to the world. I'm pretty new to BIND and named, so maybe I missed something
>> simple?
> 
> In this case, you need to create a root hints WITHOUT the "true" roots
> in it.
> 
> The problem, as others have noted is that you are trying to do inverse
> lookups and the queries to the roots are timing out.
Note that since you are in a controlled environment, I'd recommend that
you could also become authoritative for the zones that the inverses are
being queried against...

In other words:  become the master of your domain.  :)

AlanC {hating replying to himself}
-- 
Alan Clegg
ISC Training and Support
+1-650-423-1357 (o) +1-919-271-8851 (m)