Configure trusted ACL for DNS recursion

Patrick · #1 (**permalink**) 10-22-08, 21:37

You may get the error about allowing Recursive Queries within DNS report of any domain hosted on your server.

Recursive Queries :I could use the nameservers listed below to performe recursive queries. It may be that I am wrong but the chances of that are low. You should not have nameservers that allow recursive queries as this will allow almost anyone to use your nameservers and can cause problems. Problem record(s) are:
198.162.1.10
198.162.1.11

Note : Here for eg : yourPrimaryIPaddress is 198.162.1.10 and
yourSecondaryIPaddress is 198.162.1.11 .

To overcome this you need to configure the trusted ACL for DNS recursion :

Code:

root@server [~]# vi /etc/named.conf

add trusted acl line after “controls” block

Code:

acl "trusted" {
127.0.0.1; 198.162.1.10; 198.162.1.11;
};

and under "options" block add following line after “version” line.

Code:

allow-recursion { trusted; };
allow-notify { trusted; };
allow-transfer { trusted; };

Save the changes and restart named service .

Code:

root@server [~]# /etc/init.d/named restart

carl · #2 (**permalink**) 11-01-08, 14:58

Patrick,

Do you have something in relation to RPC over HTTP - ACL Error ?