> On 12. 5. 2025, at 15:11, MCBRIDE, DAVID W. <david.w.mcbr...@durham.ac.uk> > wrote: > > The alternative is to disable the creation of all empty zones entirely > with `empty-zones-enable no;`, however, this is unattractive as it will > fail broken.
This would be my preferred solution. > (I can try to ensure that the catalog (and local authoritative server) > all reference each of the private DNS zones as required, and keep this > set updated; however, any ommission will cause queries to be > inappropriately forwarded to the DNS root.) You can run AS 112 anycast in your network to catch and stragglers. You should do this anyway as an ISP if you have resources for this. Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. -- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
