Visweswaran, Gowri <gvisweswa...@verisign.com> wrote: > > I was looking for guidelines similar to the link you sent below in an > IETF document,
There isn't anything AFAIK. Even the Open Resolver Project doesn't have any helpful guidance, as I thought it might. > and if anyone knows of any other documentation on the > policies of the current major recursive servers. BIND defaults to localhost and localnets, i.e. the nameserver's directly-connected subnets. See "allow-recursion" in ftp://ftp.isc.org/isc/bind9/9.10.2-P4/doc/arm/Bv9ARM.ch06.html Unbound defaults to localhost only. See "access-control" in http://unbound.nlnetlabs.nl/documentation/unbound.conf.html The PowerDNS recursor defaults to RFC1918 addresses. https://doc.powerdns.com/md/recursor/settings/#allow-from The Knot resolver listens on localhost by default. https://github.com/CZ-NIC/knot-resolver/tree/master/daemon#network-configuration Dnsmasq seems to default to open unless you specify --local-service (?!) http://www.thekelleys.org.uk/dnsmasq/docs/dnsmasq-man.html Tony. -- f.anthony.n.finch <d...@dotat.at> http://dotat.at/ Viking, North Utsire: Easterly 4 or 5, increasing 6 at times. Slight or moderate, but rough in southwest Viking. Showers later. Good, occasionally poor later. _______________________________________________ DNSOP mailing list DNSOP@ietf.org https://www.ietf.org/mailman/listinfo/dnsop
