On 19/01/2021 08:40, Dedan Irungu via Pdns-users wrote:
recursive_ips:addMask('0.0.0.0/0 <http://0.0.0.0/0>') -- These
network masks are the ones from allow-recursion in the Authoritative
Server
addAction(NetmaskGroupRule(recursive_ips), PoolAction('recursor'))
These two lines together say: "for incoming queries from *any* IP
addresses: send them to the recursor".
Try changing the first one to something like:
recursive_ips:addMask('192.168.0.0/16 <http://0.0.0.0/0>') --
netblock containing your local clients
Then queries from 192.168.x.x will go to the recursor, whereas queries
from any *other* addresses will go to the authoritative server.
_______________________________________________
Pdns-users mailing list
Pdns-users@mailman.powerdns.com
https://mailman.powerdns.com/mailman/listinfo/pdns-users
