On Thursday 26 October 2006 19:14, Eric Haskins wrote:
Dont block DNS requests at the firewall. Your customers wont be happy when
their sites dont resolve :)
90% of the time it's cheaper and easier to have someone else run the DNS.
--
Tom Chiverton
Helping to autoschediastically architect
To: CF-Talk
Subject: RE: Open DNS Server / Recursion
Easy... don't disable recursive lookups.
Without recursive lookups, your DNS server will only respond to queries
about things that it knows... i.e. the dns entries hosted on your server.
In order for it to resolve domains that it knows nothing
to look up non-local domains. So, I need to be able to restrict the
facility of recursive lookups to the local IPs. I can't see any way to do
that.
-Original Message-
From: Russ [mailto:[EMAIL PROTECTED]
Sent: 26 October 2006 19:17
To: CF-Talk
Subject: RE: Open DNS Server / Recursion
I have a problem in that when I disable Recursive look
ups the DNS servers then fail to answer DNS queries
from the local IP addresses.
In BIND you can set the bind.conf file to only allow certain IP address to
be able to initiate a recursive query.
The directive is in the options section:
Totally off topic.
I run DNS servers for a number of domains and also mail servers for those
domains.
I have a problem in that when I disable Recursive look ups the DNS servers
then fail to answer DNS queries from the local IP addresses.
Any ideas anyone please?
Jenny
Jennifer Gavin-Wear
Fast
On Thursday 26 October 2006 13:43, Jenny Gavin-Wear wrote:
I have a problem in that when I disable Recursive look ups the DNS servers
then fail to answer DNS queries from the local IP addresses.
Any ideas anyone please?
Don't turn recursive lookups off :-)
They are what makes your DNS server
Dont block DNS requests at the firewall. Your customers wont be happy when
their sites dont resolve :)
We have recursion turned off on our DotCom DNS because we only host 6
Domains. All our coporate users use a Recursing DNS server to do their
surfing. So if it is for both Surfing and Hosting
using other dns servers.
Russ
-Original Message-
From: Jenny Gavin-Wear [mailto:[EMAIL PROTECTED]
Sent: Thursday, October 26, 2006 8:44 AM
To: CF-Talk
Subject: OT: Open DNS Server / Recursion
Totally off topic.
I run DNS servers for a number of domains and also mail servers
8 matches
Mail list logo