<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">Hello,<div class=""><br class=""></div><div class="">is it possible to exclude zones from forwarding?</div><div class=""><br class=""></div><div class="">In plain bind config you could just leave forwarders empty to overwrite the forwarders config for just one domain.</div><div class=""><br class=""></div><div class="">From my “recursor-beginners-point-of-view" something like this could work, but it obviously doesn’t.</div><div class=""><br class=""></div><div class=""><i class="">forward-zones=.=8.8.8.8,<a href="http://example.com" class="">example.com</a>=,<a href="http://example.org" class="">example.org</a>=8.8.4.4</i></div><div class=""><br class=""></div><div class="">Unfortunately I can’t get no records from <a href="http://example.com" class="">example.com</a> zone.</div><div class=""><br class=""></div><div class=""></div><blockquote type="cite" class=""><div class=""><b class="">$ dig @ns01.domain.local <a href="http://example.net" class="">example.net</a> ns</b></div><div class=""><br class="">; <<>> DiG 9.15.0 <<>> @ns01.domain.local <a href="http://example.net" class="">example.net</a> ns<br class="">; (1 server found)<br class="">;; global options: +cmd<br class="">;; Got answer:<br class="">;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 30890<br class="">;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1<br class=""><br class="">;; OPT PSEUDOSECTION:<br class="">; EDNS: version: 0, flags:; udp: 4096<br class="">;; QUESTION SECTION:<br class="">;<a href="http://example.net" class="">example.net</a>.<span class="Apple-tab-span" style="white-space:pre"> </span>IN<span class="Apple-tab-span" style="white-space:pre"> </span>NS<br class=""><br class="">;; ANSWER SECTION:<br class=""><a href="http://example.net" class="">example.net</a>.<span class="Apple-tab-span" style="white-space:pre"> </span>4430<span class="Apple-tab-span" style="white-space:pre"> </span>IN<span class="Apple-tab-span" style="white-space:pre"> </span>NS<span class="Apple-tab-span" style="white-space:pre"> </span><a href="http://b.iana-servers.net" class="">b.iana-servers.net</a>.<br class=""><a href="http://example.net" class="">example.net</a>.<span class="Apple-tab-span" style="white-space:pre"> </span>4430<span class="Apple-tab-span" style="white-space:pre"> </span>IN<span class="Apple-tab-span" style="white-space:pre"> </span>NS<span class="Apple-tab-span" style="white-space:pre"> </span><a href="http://a.iana-servers.net" class="">a.iana-servers.net</a>.<br class=""><br class="">;; Query time: 24 msec<br class="">;; SERVER: 10.10.10.2#53(10.10.10.2)<br class="">;; WHEN: Mo Sep 30 15:11:49 CEST 2019<br class="">;; MSG SIZE rcvd: 85<br class=""></div></blockquote><div class=""><br class=""><blockquote type="cite" class=""><b class="">$ dig @ns01.domain.local <a href="http://example.org" class="">example.org</a> ns</b><br class=""><br class="">; <<>> DiG 9.15.0 <<>> @ns01.domain.local <a href="http://example.org" class="">example.org</a> ns<br class="">; (1 server found)<br class="">;; global options: +cmd<br class="">;; Got answer:<br class="">;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 24688<br class="">;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1<br class=""><br class="">;; OPT PSEUDOSECTION:<br class="">; EDNS: version: 0, flags:; udp: 4096<br class="">;; QUESTION SECTION:<br class="">;<a href="http://example.org" class="">example.org</a>.<span class="Apple-tab-span" style="white-space:pre"> </span>IN<span class="Apple-tab-span" style="white-space:pre"> </span>NS<br class=""><br class="">;; ANSWER SECTION:<br class=""><a href="http://example.org" class="">example.org</a>.<span class="Apple-tab-span" style="white-space:pre"> </span>15027<span class="Apple-tab-span" style="white-space:pre"> </span>IN<span class="Apple-tab-span" style="white-space:pre"> </span>NS<span class="Apple-tab-span" style="white-space:pre"> </span><a href="http://b.iana-servers.net" class="">b.iana-servers.net</a>.<br class=""><a href="http://example.org" class="">example.org</a>.<span class="Apple-tab-span" style="white-space:pre"> </span>15027<span class="Apple-tab-span" style="white-space:pre"> </span>IN<span class="Apple-tab-span" style="white-space:pre"> </span>NS<span class="Apple-tab-span" style="white-space:pre"> </span><a href="http://a.iana-servers.net" class="">a.iana-servers.net</a>.<br class=""><br class="">;; Query time: 24 msec<br class="">;; SERVER: 10.10.10.2#53(10.10.10.2)<br class="">;; WHEN: Mo Sep 30 15:11:54 CEST 2019<br class="">;; MSG SIZE rcvd: 88<br class=""></blockquote><br class=""><blockquote type="cite" class=""><b class="">$ dig @ns01.domain.local <a href="http://example.com" class="">example.com</a> ns</b><br class=""><br class="">; <<>> DiG 9.15.0 <<>> @ns01.domain.local <a href="http://example.com" class="">example.com</a> ns<br class="">; (1 server found)<br class="">;; global options: +cmd<br class="">;; Got answer:<br class="">;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 33091<br class="">;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1<br class=""><br class="">;; OPT PSEUDOSECTION:<br class="">; EDNS: version: 0, flags:; udp: 4096<br class="">;; QUESTION SECTION:<br class="">;<a href="http://example.com" class="">example.com</a>.<span class="Apple-tab-span" style="white-space:pre"> </span>IN<span class="Apple-tab-span" style="white-space:pre"> </span>NS<br class=""><br class="">;; Query time: 24 msec<br class="">;; SERVER: 10.10.10.2#53(10.10.10.2)<br class="">;; WHEN: Mo Sep 30 15:11:56 CEST 2019<br class="">;; MSG SIZE rcvd: 40</blockquote><br class=""></div><div class="">Regards,</div><div class="">Vitali</div></body></html>