Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 7 Jun 2006 19:56:20 -0700
From:      Lyndon Nerenberg <lyndon@orthanc.ca>
To:        Maxim Konovalov <maxim@macomnet.ru>
Cc:        current@freebsd.org
Subject:   Re: named recursive queries
Message-ID:  <6F58AE0B-7A48-4675-96C3-92899A4DF8AD@orthanc.ca>
In-Reply-To: <20060608015022.Y52876@mp2.macomnet.net>
References:  <20060608015022.Y52876@mp2.macomnet.net>

next in thread | previous in thread | raw e-mail | index | archive | help
> I think we need to stop spread misconfigured named's too.  Any
> objections?

I like OpenBSD's way a bit better:

acl clients {
         localnets;
         ::1; 127.0.0.1;
};

options {
         allow-recursion { clients; };
};

It's the same as you propose, but also allows hosts on directly  
connected networks to query.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?6F58AE0B-7A48-4675-96C3-92899A4DF8AD>