parent dns answers the ARR of child dns

2009-12-03 Thread Tech W.
Hello, Firstly thanks for any helps I have got on this list for our DNS setup in university environment. Now I meet another problem, please see this dig: # dig smartip.gduf.edu.cn ns +short dtone1.gduf.edu.cn. That means smartip.gduf.edu.cn is a zone whose NS is dtone1.gduf.edu.cn. I have se

Re: Disable Refused answer

2009-12-03 Thread Peter Andreev
Search in arm by keyword "blackhole" will save father of russian democracy :-) 2009/12/3 Dmitry Rybin > Barry Margolin wrote: > >> In article , >> Dmitry Rybin wrote: >> >> Hello! >>> >>> I can't find in docs how disable answer (Refused), if recursion for IP is >>> not allowed? >>> >> >> What

Re: Disable Refused answer

2009-12-03 Thread Dmitry Rybin
Give me parabellum :) This is not answer. I wont to disable Refused answers for not allowed client in recursion. Peter Andreev wrote: Search in arm by keyword "blackhole" will save father of russian democracy :-) 2009/12/3 Dmitry Rybin mailto:kirg...@corbina.net>> Barry Margolin wrote:

Re: Disable Refused answer

2009-12-03 Thread Peter Andreev
Are you want to disable refused answers for recursion and allow any answers for authoritative information in the same time? 2009/12/3 Dmitry Rybin > Give me parabellum :) > > This is not answer. I wont to disable Refused answers for not allowed > client in recursion. > > Peter Andreev wrote: > >

Re: Disable Refused answer

2009-12-03 Thread Kevin Darcy
Dmitry Rybin wrote: Barry Margolin wrote: In article , Dmitry Rybin wrote: Hello! I can't find in docs how disable answer (Refused), if recursion for IP is not allowed? What do you expect it to do instead? Not respond at all? Drop not allowed request. This is not compatible with the D

Re: parent dns answers the ARR of child dns

2009-12-03 Thread Chris Buxton
On Dec 3, 2009, at 3:38 AM, Tech W. wrote: > # dig smartip.gduf.edu.cn ns +short > dtone1.gduf.edu.cn. > > # dig www.smartip.gduf.edu.cn +short > 121.8.235.88 > > # dig www.smartip.gduf.edu.cn +trace [...] > www.smartip.gduf.edu.cn. 8 IN A 218.192.12.4 > www.smartip.gduf.edu.c

Re: Disable Refused answer

2009-12-03 Thread Chris Buxton
On Dec 2, 2009, at 6:40 AM, Dmitry Rybin wrote: > Hello! > > I can't find in docs how disable answer (Refused), if recursion for IP is not > allowed? Something like this should work: _ options { directory "/var/named"; }; acl authorized-clients {

Re: parent dns answers the ARR of child dns

2009-12-03 Thread Kevin Darcy
Not only that, but DNS.gduf.edu.cn is performing recursion, while not setting RA in, and not copying RD into, the header of the response. % dig www.smartip.gduf.edu.cn. @DNS.gduf.edu.cn ; <<>> DiG 9.3.0 <<>> www.smartip.gduf.edu.cn. @DNS.gduf.edu.cn ;; global options: printcmd ;; Got answer: ;;

Re: Disable Refused answer

2009-12-03 Thread Kevin Darcy
Chris Buxton wrote: On Dec 2, 2009, at 6:40 AM, Dmitry Rybin wrote: Hello! I can't find in docs how disable answer (Refused), if recursion for IP is not allowed? Something like this should work: _ options { directory "/var/named"; }; acl aut

Re: Disable Refused answer

2009-12-03 Thread Chris Buxton
On Dec 3, 2009, at 10:16 AM, Kevin Darcy wrote: > Chris Buxton wrote: >> On Dec 2, 2009, at 6:40 AM, Dmitry Rybin wrote: >>> Hello! >>> >>> I can't find in docs how disable answer (Refused), if recursion for IP is >>> not allowed? >> >> >> Something like this should work: >> ___

Re: Disable Refused answer

2009-12-03 Thread Mark Andrews
In message , Chris Buxton writes: > On Dec 3, 2009, at 10:16 AM, Kevin Darcy wrote: > > Chris Buxton wrote: > >> On Dec 2, 2009, at 6:40 AM, Dmitry Rybin wrote: > >>> Hello! > >>> > >>> I can't find in docs how disable answer (Refused), if recursion for IP is > not allowed? > >> > >> > >> Som

Re: Disable Refused answer

2009-12-03 Thread Bill Larson
Chris Buxton said: > There is no definitive list of the options that can or can not be used in a view. Likewise, the description of the blackhole statement makes no mention of the fact that it's not valid inside a view. There is the "doc/misc/options" file in the BIND sources that lists the ma

Re: parent dns answers the ARR of child dns

2009-12-03 Thread Tech W.
--- On Fri, 4/12/09, Kevin Darcy wrote: > From: Kevin Darcy > Subject: Re: parent dns answers the ARR of child dns > To: bind-users@lists.isc.org > Received: Friday, 4 December, 2009, 1:56 AM > Not only that, but DNS.gduf.edu.cn is > performing recursion, while not > setting RA in, and not co