[cobalt-users] Recursive Queries (was: Running Bind as non Root)

[Barbara - <thebizworkers@xxxxxxxxx>]

>You have answered your own question, tho you 
>don't realize it, to allow *your* domains to 
>be resolved, you need to allow anyone to make 
>queries, you are trying to deny that also, 
>all you want to refuse/restrice is recursion, 
>since looking up domain names *other thanyour 
>own* requires a recursive lookup....

Thank you for your help and information gsh. Old Babs
is feeling a little silly right now. :-P I'm afraid
this might be going right over my head (restricting
recursion). I guess I should put this book down for a
while, it's all starting to mush together inside my
brain. :-P

So I don't really want to restrict querys, I just want
to restrict recursion. Should I just drop the
allow-query part of that code? > (I'm struggling with
this one ;-)

Would it look like this?

options {
directory "/etc/named";
allow-transfer { MY SECONDARY DNS; };
allow-recursion { 192.168.1.0/24; 207.35.78.0/24;
127.0.0.1; };
version "Go away!";
};

Is that all I want to add to the named.conf file to
restrict it?

Thanks again for your help and comments, the fog is
slowly lifting from around my head. You should see how
many backups from attempted changes I have of
named.conf  :-P  Thanks again

Barbara

__________________________________________________
Do You Yahoo!?
Get email alerts & NEW webcam video instant messaging with Yahoo! Messenger
http://im.yahoo.com