DNS requests with Rd flag cleared

[Phil Mayers]

On 04/11/11 16:21, patrice.wacrenier at orange.com wrote:

> Suppose that my organization has one authoritative DNS server (let’s
> call it DNS1) for the zone “myzone.fr” configured in such way that the
> subzone “subzone1.myzone.fr” is delegated to another authoritative DNS
> server (let’s say DNS2).
>
> Suppose also, that for security reason, DNS2 is configured to respond to
> requests issued by DNS1 only.

This is a broken configuration.

Why don't you simply make DNS1 a slave for "subzone1.myzone.fr"?