Delegation - what needs to be there?
Barry Margolin
barmar at alum.mit.edu
Sat Mar 27 01:43:21 UTC 2010
In article <mailman.960.1269635430.21153.bind-users at lists.isc.org>,
Peter Laws <plaws at ou.edu> wrote:
> Delegating a zone to a server that has views. Internal view will allow any
> query. External view will only allow resolution of the MX record for that
> zone. The MX points to hosts in another zone (which is also
> publicly-accessible).
>
> When I query from an address that matches the ACL for the external view, I
> get the MX records back OK, but no A record.
Presumably because you don't allow recursion or query-cache for external
clients.
>
> Is that right?
>
> Would a client just go and try to resolve the name on it's own?
Of course.
>
> Or do I need to provide glue records in the delegated zone ... probably
> not, but thought I'd better ask.
The only time you're required to provide glue is when a subzone is
delegated to a nameserver whose name is in the subzone, to prevent a
chicken-and-egg problem.
--
Barry Margolin, barmar at alum.mit.edu
Arlington, MA
*** PLEASE don't copy me on replies, I'll read them in the group ***
More information about the bind-users
mailing list