LinuxQuestions.org
Share your knowledge at the LQ Wiki.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices


Reply
  Search this Thread
Old 11-30-2015, 05:11 AM   #1
tripialos
Member
 
Registered: Apr 2012
Posts: 166

Rep: Reputation: Disabled
bind9 and DNS theoretical question


I am trying to understand the meaning of a "hint" (bind config term) type nameserver vs a recursive one.

I read on a book that when bind is configured as per below, it will not recursively resolve a query but instead will reply with a referral.

Code:
..text omitted.. 

recursion no;


..text omitted..

zone "." IN {
        type hint;
        file "named.ca";
};

I have bought my own domain name and setup my own Authoritative nameserver with bind9 for that domain. Since my nameserver is the Authoritative of my domain it accepts queries from everyone on the internet but of course "recursive" is disabled in order to avoid having a public-open dns resolver.

My question is, the way I think of it, my nameserver, one way or another, will reply to the query either resolving the answer recursively or by providing a referral. Is that correct?

I mean if someone tries to resolve the example.com using my nameserver, despite the fact that my nameserver recursion is set to off, it will give him the referral , which I guess is the "." nameservers. So even if my server is not set to recursive it will respond to clients.
 
Old 11-30-2015, 07:33 AM   #2
zhjim
Senior Member
 
Registered: Oct 2004
Distribution: Debian Squeeze x86_64
Posts: 1,748
Blog Entries: 11

Rep: Reputation: 233Reputation: 233Reputation: 233
Quote:
Originally Posted by tripialos View Post
My question is, the way I think of it, my nameserver, one way or another, will reply to the query either resolving the answer recursively or by providing a referral. Is that correct?
This is correct. But you can use the view stanza to limit which clients get a response.

Quote:
Originally Posted by tripialos View Post
I mean if someone tries to resolve the example.com using my nameserver, despite the fact that my nameserver recursion is set to off, it will give him the referral , which I guess is the "." nameservers. So even if my server is not set to recursive it will respond to clients.
Especially as you set recursion to off which means that you only give out referalls. Besides if you have the lookup allready in the cache. Then it sends out the looked up target ip. Regardless of the recursion stanza.
Also be sure about what the hint or . zone realy is. Its the top of the dns tree. Not more not less.

A book i always come back to. The link with the special hint part: http://www.zytrax.com/books/dns/ch4/index.html#caching
 
1 members found this post helpful.
Old 11-30-2015, 01:49 PM   #3
tripialos
Member
 
Registered: Apr 2012
Posts: 166

Original Poster
Rep: Reputation: Disabled
Quote:
Originally Posted by zhjim View Post
This is correct. But you can use the view stanza to limit which clients get a response.



Especially as you set recursion to off which means that you only give out referalls. Besides if you have the lookup allready in the cache. Then it sends out the looked up target ip. Regardless of the recursion stanza.
Also be sure about what the hint or . zone realy is. Its the top of the dns tree. Not more not less.

A book i always come back to. The link with the special hint part: http://www.zytrax.com/books/dns/ch4/index.html#caching

Hey. Thanks for the reply and more importantly special thanks for the link. Im in the process of getting myself more than familiar with DNS services and in some parts i got confused. Just like the question i posted.

Well your asnwear clears things enough.
 
  


Reply

Tags
bind9, dns


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Bind9 DNS Question Slyke Linux - Server 3 08-26-2014 08:58 PM
[SOLVED] I have a partially theoretical question. abcde597 Programming 7 11-06-2012 04:13 PM
Theoretical question: Install linux via serial port? linuxlicious Linux - General 10 12-05-2011 05:46 PM
INIT and the boot scripts, a theoretical question. stf92 Linux - Newbie 4 09-19-2011 05:09 AM
Theoretical Question jgr220 Linux - Security 3 03-29-2003 05:40 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie

All times are GMT -5. The time now is 10:16 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration