On 11/04/15 14:03, Chuck Anderson wrote:

I can't stop clients from making certain kinds of queries (unless BIND
has a feature to refuse such queries or not recurse for them?).
Whenever a client makes the 'ANY' query, it effectively causes a DoS
on that name.  Luckily the MinTTL is only 30 seconds, so the problem
goes away after 30 seconds.

This is a fair point. TBH I wonder if bind mightn't be better caching ANY as a separate pseudo-type, if I'm understanding the problem correctly.
_______________________________________________
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Reply via email to