About root zones

[Peter Andreev]

2011/12/21 Matus UHLAR - fantomas <uhlar at fantomas.sk>:
>>>>> On 20.12.11 17:37, Peter Andreev wrote:
>>>>>>
>>>>>> Whether it means that without hint zone named still can perform
>>>>>> iterative lookups for its internal purposes?
>
>
> On 21.12.11 13:05, Peter Andreev wrote:
>>
>> Well, we run a bunch of authoritative-only slave servers and obviously
>> they don't have to perform any kind of lookups.
>
>
> If they don't have to, they won't.

I hope so.
>
>
>> Some time ago user complained that one of these slave servers
>> responses with wrong data. My colleague tried to investigate this
>> issue, but without any success. Just in case we disabled
>> "additional-from-cache".
>
>
> Disabling recursion should do the same afaik. However, disabling
> additional-from-cache is OK and afaik disabled by default.

No, it is enabled by default.

>
>
>> That's why any sort of internal lookups looks very suspicious for me.
>
>
> server needs to resolve names if it's supposed to send NOTIFY messages.

All these servers are slaves. They don't send notifies.

So while I'm really confused about described issue, I'd like to not
speculate on it, because it happened only once.
What I don't like at all is the impossibility to disable these
lookups. Of course I can follow Jeff's advice and redirect these
lookups to localhost, but it is not a solution, it only transfers
problem to another area.

Ok, may be I'm a paranoid and worrying about trifles, but news about
compiled in hints astonished me.

>
>
> --
> Matus UHLAR - fantomas, uhlar at fantomas.sk ; http://www.fantomas.sk/
> Warning: I wish NOT to receive e-mail advertising to this address.
> Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
> I drive way too fast to worry about cholesterol.
> _______________________________________________
>
> Please visit https://lists.isc.org/mailman/listinfo/bind-users to
> unsubscribe from this list
>
> bind-users mailing list
> bind-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users



-- 
--
AP