Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

When I ask my DNS server for a non existent domain it gives me no answer rather than saying "REFUSED":

#nslookup redhafdst.com. ns.myserver.com
Server:         ns.myserver.com
Address:        201.27.144.76#53

Non-authoritative answer:
*** Can't find redhafdst.com.: No answer

In windows it lists all the root servers:

> nslookup fakesite667.com ns.myserver.com
Server:   ns.myserver.com
Address:  201.27.144.76

Name:    fakesite667.com
Served by:
- H.ROOT-SERVERS.NET
          128.63.2.53
...
- D.ROOT-SERVERS.NET
          128.8.10.90
          2001:500:2d::d

Is this normal behavior? Does it have something to do with a security risk or a bad configuration?

share|improve this question

1 Answer 1

up vote 1 down vote accepted

Refusing queries for random domains is an indication that's it's configured to be authoritative only, and to refuse requests for which it doesn't directly have a zone file.

There's a handful of options that combine to determine a BIND server's recursion behavior, but mostly, you're looking for the settings of the recursion and allow-recursion options. They're either disabled, or recursion may be enabled but your host isn't in the allow-recursion list.

share|improve this answer
    
Authoritative Only was the key, now it works as expected. Thanks. –  Marcelo González Aug 15 '11 at 6:37

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.