If this is really needed, it should be restricted to only trusted IP addresses using an ACL in your BIND configuration (named.conf) file.
Path: /etc/named.conf
Here is an example ACL:
Code:
acl customallow {
127.0.0.1;
1.2.3.4;
};
In the above example, replace "1.2.3.4" with the (preferably static) WAN/public IP address of your laptop or the gateway it connects from. This is not recommended if you connect from a dynamic IP address, as you would have to maintain (update/edit) the configuration each time the dynamic IP address changes.
Once that is completed, then ensure the options section in your BIND named.conf has the following line added (assuming there is not yet an "allow-recursion" entry already present):
Look for the section beginning with "options {" and insert the following within:
Code:
allow-recursion { customallow; };
Here is a very basic example of the options section, with the new entry:
Code:
options {
allow-recursion { customallow; };
};
Do not use this as your entire options section; only insert the new line into your existing options section, preserving any existing entries.