Viktor Dukhovni <ietf-dane@xxxxxxxxxxxx> wrote: > Best practice is to not conflate authoritative and recursive DNS > servers. If you put an authoritative rather than a recursive > resolver in /etc/resolv.conf, that's a misconfiguration. Not really. Best practice is to ensure that name servers identified in NS records are authoritative-only. Recursive servers are more complicated. https://lists.isc.org/pipermail/bind-users/2015-August/095482.html https://lists.isc.org/pipermail/bind-users/2015-August/095479.html Tony. -- f.anthony.n.finch <dot@xxxxxxxx> http://dotat.at/ North Biscay: Northeasterly becoming cyclonic later, 5 or 6. Slight or moderate. Thundery showers. Good, occasionally poor.