Re: Question About Recursion In A Split Horizon Setup

2020-04-17 Thread Bob Harold
On Fri, Apr 17, 2020 at 12:45 PM Tim Daneliuk wrote: > On 4/17/20 10:17 AM, julien soula wrote: > > On Fri, Apr 17, 2020 at 09:56:21AM -0500, Tim Daneliuk wrote: > >> On 4/17/20 9:50 AM, Bob Harold wrote: > >>> > >>> Agree, that's odd, and not what the man page says. Any chance that > there is s

Re: Question About Recursion In A Split Horizon Setup

2020-04-17 Thread Timothe Litt
On 17-Apr-20 10:56, Tim Daneliuk wrote: > On 4/17/20 9:50 AM, Bob Harold wrote: >> Agree, that's odd, and not what the man page says.  Any chance that there is >> some other DNS helper running, like resolved, nscd, dnsmasq, etc? > Nope. This is vanilla FreeBSD with vanilla bind running. > >> 'dig

Re: Question About Recursion In A Split Horizon Setup

2020-04-17 Thread Tim Daneliuk
On 4/17/20 10:17 AM, julien soula wrote: > On Fri, Apr 17, 2020 at 09:56:21AM -0500, Tim Daneliuk wrote: >> On 4/17/20 9:50 AM, Bob Harold wrote: >>> >>> Agree, that's odd, and not what the man page says.  Any chance that there >>> is some other DNS helper running, like resolved, nscd, dnsmasq, et

Re: Question About Recursion In A Split Horizon Setup

2020-04-17 Thread julien soula
On Fri, Apr 17, 2020 at 09:56:21AM -0500, Tim Daneliuk wrote: > On 4/17/20 9:50 AM, Bob Harold wrote: > > > > Agree, that's odd, and not what the man page says.  Any chance that there > > is some other DNS helper running, like resolved, nscd, dnsmasq, etc? > > Nope. This is vanilla FreeBSD with

Re: Question About Recursion In A Split Horizon Setup

2020-04-17 Thread Bob Harold
On Fri, Apr 17, 2020 at 11:03 AM Konstantin Stefanov wrote: > On 17.04.2020 17:56, Tim Daneliuk wrote: > > On 4/17/20 9:50 AM, Bob Harold wrote: > >> > >> Agree, that's odd, and not what the man page says. Any chance that > there is some other DNS helper running, like resolved, nscd, dnsmasq, et

Re: Question About Recursion In A Split Horizon Setup

2020-04-17 Thread Konstantin Stefanov
On 17.04.2020 17:56, Tim Daneliuk wrote: On 4/17/20 9:50 AM, Bob Harold wrote: Agree, that's odd, and not what the man page says.  Any chance that there is some other DNS helper running, like resolved, nscd, dnsmasq, etc? Nope. This is vanilla FreeBSD with vanilla bind running. Lately vanil

Re: Question About Recursion In A Split Horizon Setup

2020-04-17 Thread Tim Daneliuk
On 4/17/20 9:50 AM, Bob Harold wrote: > > Agree, that's odd, and not what the man page says.  Any chance that there is > some other DNS helper running, like resolved, nscd, dnsmasq, etc? Nope. This is vanilla FreeBSD with vanilla bind running. > 'dig' should tell you what address it used, at t

Re: Question About Recursion In A Split Horizon Setup

2020-04-17 Thread Bob Harold
On Fri, Apr 17, 2020 at 10:34 AM Tim Daneliuk wrote: > On 4/17/20 7:26 AM, Bob Harold wrote: > > > > On Thu, Apr 16, 2020 at 7:17 PM Tim Daneliuk > wrote: > > > > We have split horizon setup and enable our internal and trusted hosts > > to do things as follo

Re: Question About Recursion In A Split Horizon Setup

2020-04-17 Thread Tim Daneliuk
On 4/17/20 7:26 AM, Bob Harold wrote: > > On Thu, Apr 16, 2020 at 7:17 PM Tim Daneliuk > wrote: > > We have split horizon setup and enable our internal and trusted hosts > to do things as follows: > >     allow-recursion { trustedhosts; }; >     all

Re: Question About Recursion In A Split Horizon Setup

2020-04-17 Thread Bob Harold
On Thu, Apr 16, 2020 at 7:17 PM Tim Daneliuk wrote: > We have split horizon setup and enable our internal and trusted hosts > to do things as follows: > > allow-recursion { trustedhosts; }; > allow-transfer { trustedhosts; }; > > 'trustedhosts' includes a number of public facing IPs as w

Question About Recursion In A Split Horizon Setup

2020-04-16 Thread Tim Daneliuk
We have split horizon setup and enable our internal and trusted hosts to do things as follows: allow-recursion { trustedhosts; }; allow-transfer { trustedhosts; }; 'trustedhosts' includes a number of public facing IPs as well as the 192.168.0/24 CIDR block. It also includes the IPs of t