inkblot/puppet-bind

Ability to turn on allow-query without needing recursion=>true

Opened this issue · 1 comments

Bind does not require recursion to be on in order for the allow-query { ... } block to be usable. However, in your template for view.erb, the allow-query and allow-query-on conditionals are internal to the "if recursion" block. This effectively prevents me from allowing external queries to a public DNS, but not allowing recursive behaviour (bad on public DNS). Is there a reason why this behaviour is so that I'm missing?

Here's some useful online docs on the query entries:

http://www.zytrax.com/books/dns/ch7/queries.html#allow-query

Note that allow-query is not influenced by the recursion setting, but allow-query-cache is.