For linux bind named.conf:

Within "options {" put:

allow-query { any; };
allow-recursion { trusted; };
allow-query-cache { trusted; };

Then, add this new section somewhere after the options closing bracket:

acl "trusted" {
localhost;
localnets;
//netblocks/IPs you want, examples below:
123.23.23.23/24;
12.123.123.123;
};

On Tuesday 10/09/2013 at 4:23 am, Eugen Leitl wrote:

On Tue, Sep 10, 2013 at 12:45:03AM -0700, Bry8 Star wrote:
If you run your own BIND/named as Authoritative DNS-Server, for some
domain-name that you own, and if it is also configured to function
as a Recursive DNS-Server for local software (in that computer), and
if you have enabled DNSSEC (for recursive side), then that would be
better, imho.

Speaking about recursive DNS for BIND, does anyone have
a working set of options which limit recursive DNS queries
to just the local subnet, and another couple IPs, maybe?

_______________________________________________
tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays