Highlighted
Anonymous_User Absent Member.
Absent Member.
1536 views

Disabling recursion - control lists option missing.

Hi,

I need to disable recursion on a server, but the server has no control lists showing at all, and the recursion option is missing from the control lists on the zone in DNS/DHCP Console. I has a dig in Imanager and couldn't fine the options there either.

Is there a cfg file or some way I can configure this manually?

DNS server is 6.5 sp8.

Thanks.
Labels (1)
0 Likes
3 Replies
Anonymous_User Absent Member.
Absent Member.

Re: Disabling recursion - control lists option missing.

Had to use the latest Java console for this, and still no joy, however creating a new DNS server in that software did give me the options.

Even though the previous software version mentions the options in it's help file, creating a new server using that didn't give me the options. I would suspect creating a new server in IManager would work, but I was trying to avoid doing that.

Looks like the only way round it though.
0 Likes
Knowledge Partner
Knowledge Partner

Re: Disabling recursion - control lists option missing.

In article <neiljt1.5slp80@no-mx.forums.novell.com>, Neiljt1 wrote:
> I need to disable recursion on a server,

sort of simple really
disable the DNS server's ability to look up domains it is not
authoritative for. Remove any forwarders, and the root domain pointers.
And/Or block the servers ability to go see any of those external
servers.


Andy Konecny
Knowledge Partner (voluntary SysOp)
KonecnyConsulting.ca in Toronto
----------------------------------------------------------------------
Andy's Profile: http://forums.novell.com/member.php?userid=75037


___
Andy of Konecny Consulting in Toronto
Knowledge Partner Profile
If you find a post helpful, click the Like button below. Thanks!
0 Likes
Knowledge Partner
Knowledge Partner

Re: Disabling recursion - control lists option missing.

In article <neiljt1.5slzen@no-mx.forums.novell.com>, Neiljt1 wrote:
> Had to use the latest Java console for this, and still no joy, however
> creating a new DNS server in that software did give me the options.
>

Just helped a couple friends with the same issue (googling lead them to
this thread and saw I knew something of the issue), and this trick
didn't help.
Since we did have one DNS server with that tab, we looked at it's
"Other" properties in ConsoleOne and put them in the other DNS server
and at least got the functionality working. In our case we did want
recursion internally, so we added the "dnipAllowRecursion" attribute
class with "localnets" and "localhost" as its individual attributes. I
think "none" would have been what you'd add to turn it off all the way.

Now this doesn't stop named.nlm from being hit by the requests, and for
some reason named.nlm still answers those requests with 'helpful
pointers' to the root servers, so it doesn't really dissuade people from
using such DNS when they so rudely use them. Given that NetWare is more
than half way through Extended support, I think it will be an uphill
battle to convince Novell to fix that last bit.


Andy Konecny
Knowledge Partner (voluntary SysOp)
KonecnyConsulting.ca in Toronto
----------------------------------------------------------------------
Andy's Profile: http://forums.novell.com/member.php?userid=75037


___
Andy of Konecny Consulting in Toronto
Knowledge Partner Profile
If you find a post helpful, click the Like button below. Thanks!
0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.