Re: Force Recursion

Marco Moock <[email protected]> Sat, 21 Feb 2026 06:32:48 +0100
Newsgroups gmane.network.dns.bind.user
Message-ID <[email protected]>
On 20.02.2026 22:18 Karol Nowicki via bind-users
<[email protected]> wrote:

> Client sending query to DNS Resolver for google.com.DNS Resolver
> cached from internal root hints that google.com is delegated to DNS
> proxy serverĀ  ( NS record ). DNS proxy is having locall information
> that google.com has to be delegated to public google name server
> 8.8.8.8 Query from DNS Resolver to DNS proxy server is being sent
> with disabled recursion flag as google.com is defined with NS record.
> Client -> DNS Caching Recursive Resolver -> DNS "Proxy" Server ->
> Public Google DNS

Why do you want to do this? Forging DNS records of foreign domains has
always been a nasty behaviour. If you want a machine that can be used
as a DNS server that forwards all queries to another machine, you are
looking for a so called stub-resolver. BIND can be configured for that
case. You need to enter the target servers as forwarders.
That will cause BIND to forward all queries with recursion desired flag
and cache them.

-- 
kind regards
Marco

Send spam to [email protected]

-- 
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list.
signature.asc (application/pgp-signature, 870 B)
-----BEGIN PGP SIGNATURE-----
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=D5Pq
-----END PGP SIGNATURE-----