Lightner, Jeff wrote: > Modern being? Actually....
In the 9.4 CHANGES file I find: --- 9.4.0a4 released --- [...] 2006. [security] Allow-query-cache and allow-recursion now default to the builtin acls "localnets" and "localhost". This is being done to make caching servers less attractive as reflective amplifying targets for spoofed traffic. This still leave authoritative servers exposed. The best fix is for full BCP 38 deployment to remove spoofed traffic. So, "modern" (in this case) is any currently supported version of BIND. 9.4, 9.5, 9.6, 9.7 AlanC
signature.asc
Description: OpenPGP digital signature
_______________________________________________ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users