[sclug] BIND 9 returns empty response instead of REFUSED for non-hosted zones

Simon Heywood simon at triv.org.uk
Sun Nov 9 17:18:59 UTC 2008


On Fri,  7 Nov 2008 13:34:13 +0000, Simon Huggins wrote:
> On Fri, Nov 07, 2008 at 01:51:33PM +0100, Simon Heywood wrote:
> > I can't work out why the second request isn't replied to with an error
> > code, but I suspect that it's something to do with ns0 being configured
> > to allow recursive requests from certain IP addresses, using views.
> 
> I've not played with views.
> How about:
> 
> allow-recursion { some-hosts-here; };
> allow-query { some-hosts-here; };
> 
> in the options stanza and allow-query { all; }; in each zone you really
> do want to be public.

That seems to do the job. Thanks!

S.



More information about the Sclug mailing list