Ramesh <rameshsaho...@gmail.com> wrote: > > I commented the root hint zone section(default) in the named.conf file to > stop bind from communicating to the global root DNS servers and it should > only use the internal forwarders available in the options{} section.
I think the config option you want is `forward only`. The default is `forward first` which has the fallback behaviour that you observed. On my servers I don't configure a hint zone: using BIND's built-in hints and trust anchor reduces the amount of configuration that needs to be deployed in the chroots and which can go stale. Tony. -- f.anthony.n.finch <d...@dotat.at> https://dotat.at/ the market alone does not distribute wealth or income fairly _______________________________________________ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users