In message <f9c141d2-6a4f-4ce2-a033-d32e7126f...@dnss.ec>, Roy Arends writes: > [1] BIND responds with SERVFAIL to a query where the QNAME is longer than 255 > bytes. When all the servers for a domain are BIND, th > is often leads to a burst of requests, striped over all the authoritative > servers for that domain. Naturally, a resolver should not > emit a query with a QNAME longer than 255 bytes, however, we do not choose > the resolvers we respond to, and thus simply deal with > these bursts. A FORMERR would (imho) be the appropriate response.
Already fixed in the last beta. Upgrade when you feel it is appropriate. 3458. [bug] Return FORMERR when presented with a overly long domain named in a request. [RT #29682] -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org _______________________________________________ dns-operations mailing list dns-operations@lists.dns-oarc.net https://lists.dns-oarc.net/mailman/listinfo/dns-operations dns-jobs mailing list https://lists.dns-oarc.net/mailman/listinfo/dns-jobs