Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Question] Disable recursive queries #1177

Closed
ammnt opened this issue Nov 15, 2019 · 4 comments
Closed

[Question] Disable recursive queries #1177

ammnt opened this issue Nov 15, 2019 · 4 comments
Labels

Comments

@ammnt
Copy link

ammnt commented Nov 15, 2019

Hello,

it 's just a question. Some ISPs require that recursive queries be disabled due to high network load. How do I do this correctly on Debian 9 + AGH 0.99.2 to avoid losing AGH`s functionality?

Thank you.

@ameshkov
Copy link
Member

AG is not a DNS recursor so this is not a problem, the recursive queries are performed on the DNS resolver side

@ammnt
Copy link
Author

ammnt commented Nov 21, 2019

AG is not a DNS recursor so this is not a problem, the recursive queries are performed on the DNS resolver side

I don 't understand. I receive notifications from my ISP to turn off recursive queries and proof-links:
https://openresolver.com/?ip=194.58.121.92

; <<>> DiG 9.11.2 <<>> @194.58.121.92 yandex.ru
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 49012
;; flags: qr rd ra; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;yandex.ru. IN A

;; ANSWER SECTION:
yandex.ru. 117 IN A 77.88.55.55
yandex.ru. 117 IN A 5.255.255.5
yandex.ru. 117 IN A 5.255.255.50
yandex.ru. 117 IN A 77.88.55.50

;; Query time: 8 msec
;; SERVER: 194.58.121.92#53(194.58.121.92)
;; WHEN: Fri Nov 15 14:00:57 MSK 2019
;; MSG SIZE rcvd: 91`

Does anyone know how to turn them off on Debian 9 if you don 't have a full bind9? Unless most ISPs do so will disable services for violation Terms & Conditions. Please, explain.

Thank you.

@ghost
Copy link

ghost commented Nov 21, 2019

Does anyone know how to turn them off on Debian 9 if you don 't have a full bind9?

Use firewall-iptables.

@ameshkov
Copy link
Member

I don 't understand. I receive notifications from my ISP to turn off recursive queries and proof-links:

This makes little sense. It's more likely they just don't want you to run a public DNS server.
If so, I'd recommend changing the VPS provider.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

2 participants