Forwarders

[Steve]

Hello

Am I correct in assuming that if I place a tick in the box
next to 'DO NOT USE RECURSION' located on the Forwarders
tab, it means that when the request cannot be resolved it
is only forwarded on to the IP address specified?

Thanks in advance

 

[Kevin D. Goodknecht [MVP]]

In

Hello

Am I correct in assuming that if I place a tick in the box
next to 'DO NOT USE RECURSION' located on the Forwarders
tab, it means that when the request cannot be resolved it
is only forwarded on to the IP address specified?

Thanks in advance

It means that if the forwarder fails to resolve the name, DNS will not
attempt to use root hints to resolve the name. Therefore if the Forwarder
fails to resolve the name, the query will fail and return a not found.

 

[Herb Martin]

Hello

Am I correct in assuming that if I place a tick in the box
next to 'DO NOT USE RECURSION' located on the Forwarders
tab, it means that when the request cannot be resolved it
is only forwarded on to the IP address specified?

Basically yes.

If you use the "Disable recursion" in the Advance box (don't) then it
not only disables the actual recurive resolution from the root down but
also disables using forwarders (to do that.)

Normally you check the one in Forwarders in two (overlapping) case:
1) you internal DNS is behind a firewall and CANNOT do the
recursion itself anyway -- no point in trying

2) Your internal DNS servers are sensitive (DCs, file servers,
data servers, etc) and you just do NOT want them visiting the
whole (scary, dangerous) Internet.

Normally you leave it clear if both #1 and #2 are false and you
don't think the Forwarder is reliable. (Find another forwarder is the
correct solution in most cases.)