inkblot / puppet-bind

18 stars 81 forks source link

Ability to turn on allow-query without needing recursion=>true #121

Open WetHippie opened 7 years ago

WetHippie commented 7 years ago

Bind does not require recursion to be on in order for the allow-query { ... } block to be usable. However, in your template for view.erb, the allow-query and allow-query-on conditionals are internal to the "if recursion" block. This effectively prevents me from allowing external queries to a public DNS, but not allowing recursive behaviour (bad on public DNS). Is there a reason why this behaviour is so that I'm missing?

WetHippie commented 7 years ago

Here's some useful online docs on the query entries:

http://www.zytrax.com/books/dns/ch7/queries.html#allow-query

Note that allow-query is not influenced by the recursion setting, but allow-query-cache is.