[Fedora] Re: bind lame servers

Ed Greshko Ed.Greshko at greshko.com
Fri May 25 03:34:43 UTC 2007


Jason L Tibbitts III wrote:
>>>>>> "AMK" == Ashley M Kirchner <ashley at pcraft.com> writes:
> 
> AMK> Yes, it's called Asia.  Several dozen IPs were querying my DNS
> AMK> non-stop.

Booooo  Asia bashing again....

> 
> You should not allow recursive queries from outside of your network.
> 
> I do this by having an internal view with a "match-clients" set to my
> internal network, and then later a default view with
>   match-clients { any; };
>   recursion no;
> although I suspect this is not the simplest way to accomplish this
> because it necessitates duplicating all of the zone declarations that
> are visible in both views.
> 
>  - J<
> 


-- 
Uh-oh!!  I'm having TOO MUCH FUN!!




More information about the users mailing list