forwarding but no recursion?

[etirado.ext at orange-ftgroup.com]

Thank you Chris, I'll take a look at this.

Regards,

Emmanuel

 

Objet : Re: forwarding but no recursion?

On Jan 20, 2009, at 9:25 AM, <etirado.ext at orange-ftgroup.com> <etirado.ext at orange-ftgroup.com 
 > wrote:
> Hello,
>
> Is this possible to disable recursion for all incoming queries except
> for those listed in zone statement with a forwarder.
>
> I know that no forwarding is allowed if we disable recursion.
>
> Something like this ( but this doesn't work I know ):
>
> I can't match people so I can't create a view.

According to the ARM for BIND 9.4, forward zones support only a few  
substatements. The same is true of hint zones (for the root hints  
list). Therefore, I see only one ungainly way to achieve this,  
creating a slave of the root zone and restricting access to it.
______________________________________

options {
	directory "/some/path";
	allow-query { any; };
	allow-recursion { any; }; // no need for allow-query-cache
};

zone "." {
	type slave;
	masters { 192.5.5.241; 192.228.79.201; 192.33.4.12; };
	file "root.zone";
	allow-query { none; };
	allow-transfer { none; };
};

zone "example.fr" {
	type forward;
	forwarders { ... };
	forward only;
};
______________________________________

Chris Buxton
Professional Services
Men & Mice


*********************************
This message and any attachments (the "message") are confidential and intended solely for the addressees. 
Any unauthorised use or dissemination is prohibited.
Messages are susceptible to alteration. 
France Telecom Group shall not be liable for the message if altered, changed or falsified.
If you are not the intended addressee of this message, please cancel it immediately and inform the sender.
********************************