Dave Page wrote:
> Marc,
>
> Can you please confirm which of the hub.org DNS servers do and do not
> allow recursion now, and if things are going to stay that way? We're
> finding that some things appear to have broken recently, apparently
> because they no longer have a suitable DNS server configured (rsync
> access via hostname on svr4, email address validation on wwwmaster).
That is probably the result of trying to tighten up security on the
resolvers (iirc you even have been cc'd in those mails) a while ago
>
> A quick test shows that ns, ns2 and ns4 are recursive, but ns3 is not at
> present.
well we should make sure that all our authoritative nameservers are NOT
providing recursion to the world - so we need to find a way to restrict
recursion to some limited hosts/ranges.
Stefan