In article <mailman.432.1333575051.63724.bind-us...@lists.isc.org>,
 Keith Burgoyne <ke...@silverorange.com> wrote:

> DNS. ns1.silverorange.com is split into two separate views: internal and 
> external. Obviously, internal handles all local hostnames and allows for 
> recursive look ups to local clients. External blocks recursive lookups 
> for all domains not hosted by us.
> 
> By enabling "querylog yes;" in named.conf, I could see that lame errors 
> appear to be generated only by requests for domains we host that live in 
> the external view, made from the internal side. For example:
> 
> Apr  4 17:55:24 clementine named[22480]: client 192.168.0.254#34358: 
> view internal: query: silverorange.com IN A -EDC (192.168.0.12)
> Apr  4 17:55:24 clementine named[22480]: lame server resolving 
> 'silverorange.com' (in 'silverorange.com'?): 24.222.7.12#53
> 
> Why would using the internal view cause a lame error?

Do you have a copy of all your hosted zones in the internal view?  If 
not, when an internal client makes a query, the server will have to 
recurse.  It will query itself, but my guess is that its own address is 
also in the internal view, so it won't be able to answer 
authoritatively, and thus will appear to be lame.

-- 
Barry Margolin
Arlington, MA
_______________________________________________
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Reply via email to