Re: Is there any config to disable bind9 retry for rcode refused

2025-03-04 Thread Mark Andrews
Returning REFUSED to ANY is anti-pmsocial as it requires every resolver in the world to special case this  There are better mechanisms to deal with it like returning TC=1 or BADCOOKIE if there is only a client cookie or returning one of the RRsets at the name. -- Mark AndrewsOn 4 Mar 2025, at 18:21

Re: Is there any config to disable bind9 retry for rcode refused

2025-03-03 Thread Greg Choules via bind-users
Hi Neil. I don't think there is. Perhaps you should suggest it in a Gitlab issue? Just to be clear, though, please can you give an example of what you mean? A real life one would be best. Either a binary pcap or +vvv to screen of the query BIND makes and the REFUSED it receives followed by it retr