Re: Force Recursion
Marco Moock <[email protected]> Sat, 21 Feb 2026 06:32:48 +0100
| Newsgroups | gmane.network.dns.bind.user |
|---|---|
| Message-ID | <[email protected]> |
On 20.02.2026 22:18 Karol Nowicki via bind-users <[email protected]> wrote: > Client sending query to DNS Resolver for google.com.DNS Resolver > cached from internal root hints that google.com is delegated to DNS > proxy serverĀ ( NS record ). DNS proxy is having locall information > that google.com has to be delegated to public google name server > 8.8.8.8 Query from DNS Resolver to DNS proxy server is being sent > with disabled recursion flag as google.com is defined with NS record. > Client -> DNS Caching Recursive Resolver -> DNS "Proxy" Server -> > Public Google DNS Why do you want to do this? Forging DNS records of foreign domains has always been a nasty behaviour. If you want a machine that can be used as a DNS server that forwards all queries to another machine, you are looking for a so called stub-resolver. BIND can be configured for that case. You need to enter the target servers as forwarders. That will cause BIND to forward all queries with recursion desired flag and cache them. -- kind regards Marco Send spam to [email protected] -- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list.
signature.asc
(application/pgp-signature, 870 B)
-----BEGIN PGP SIGNATURE----- iQJPBAEBCAA5FiEEpXefSZn9R6zNZtTQE76RLz2tRfAFAmmZQ4AbFIAAAAAABAAO bWFudTIsMi41KzEuMTEsMiwyAAoJEBO+kS89rUXwChwP/ipHroaVNVU4gLkqXtxz q3f3iBUiOhHAnHhpFdfK0bK2TsmHFHsEXqshiX9ZsNGyhzWK42S6+HZyBVNAFnCq 8QkgGmXwatqFARGyS+3SVISxYhIyQ7EeIFj28dFgMugmXORj27YOFAiIjkH1/yGy jtHQTuDnppiEbrDX/SKigiNoe3Y9fMALFFBUNTS4yIHujN5quQud1yChmwY0e0cg TYQ02U8JTWvbTKuN9R3wDugUHxG4iI0rTb3aD7I4RROgMtbI6B6K6AMokIMMjf1C XkQ9fygAmWNoLPpZBDTB/SDfjYmxdojgYITDjFaoaYVLUWwC+SiZwPDi1ZFWzYsc oNbxWgxMvyWRaysttcrW2fyFJtBIJramsa45bZnsOExgTZN1eudaRKsQ750MOiWf cK5mrUvW1nOsaxCegAWUm0lX9Ho5FBxspGKqyPv8mrAK8+EldkybtucWtdng4m3l ZXC2tNqFgWqexxAeb4XlCzuKfssJjbaEmGXg8wkRPfjObMXbqb8wLAwoUALfzjKo Y/BD7jVhmKroOSvZ764KE1077XqkUcEqjk9w9BHBWjuOTDGoMOQgWtx7KZtkMqyi 0UkhbxiXouSE73Ms1iWBKSS4GR+ya7YD1S/UVIaWYvPJvDF3gDLZ21z4r/8YfGUR /EMrBuO3XV4r5i9HBq+YWqHW =D5Pq -----END PGP SIGNATURE-----