Date:  Sat, 13 May 2006 19:01:43 -0700
From:  "Bruce Timberlake" <brucetimberlake (at mark) gmail.com>
Subject:  [coba-e:05165] Re: DNS Report Warning
To:  coba-e (at mark) bluequartz.org
Message-Id:  <f76f5d3e0605131901i3dcbda99h3ae4861871a98da9 (at mark) mail.gmail.com>
In-Reply-To:  <200605140120.k4E1Kowt018628 (at mark) info.eis.net.au>
References:  <200605131913.02678.lesmith (at mark) ecsis.net>	 <200605140120.k4E1Kowt018628 (at mark) info.eis.net.au>
X-Mail-Count: 05165

> Speaking of DNS Report,
> last week a asked the question about the "Open DNS servers" warning and it
> was suggested to me to turn off "Cache Record Lookups" in the Advanced DNS
> options. That worked and I stopped getting "Open DNS servers" on DNS report,
> however it had a show stopping side effect, both the servers that I turned
> of the cached records on stopped being able to look up domain names for
> domains that they were not hosting. It's almost as if the forwarder records
> were missing. I had a look in the named.conf file and the forwarder entries
> seemed to be there. I ended up having to turn cached record lookups back on.
>
> Anyone have an idea what might be wrong?

What DNS servers are listed in the UI as the primary and secondary
servers for the server itself? They should be pointed to your ISPs
pri/sec servers, not your server itself.  If the recursive lookups
were enabled, you could tell it to look to itself, and it would
automatically find domain info for non-self-hosted domains. Without
the recursion, it can no longer do that.