Bind - local query and forwarder - recursion
 

Hi,

I have a DNS server who act as master dns for local domain and have conditional forwarder.

But I see that for unknow domain, bind sent dns query to root server and I don't want to have this.
If I disable recusion, I lose the forwarding.

So how can I have a master DNS for my local domain with conditional forwarder (for external domain) without contacting root server.

Actually, I have many log message like this :

REFUSED unexpected RCODE resolving './NS/IN': 192.203.230.10#53

My DNS server is not connected to the internet.

The root.hints file holds information for top-level domains and allows the DNS resolution process to be started. The reason you're seeing this when connecting to an unknown domain is, when your DNS server is handling unknown queries, it can't find that domain by itself and needs to check in with the root servers.

Either you configure a private set of root servers yourself, or allow access.