On 8/22/18, Darcy, Kevin wrote:
> So, the short answer is that check-names is pretty granular, doing
> "check-names response fail" is just asking for trouble, for a resolver at
> the Internet edge, since there's too much squirrely stuff out there. Most
> folks just
So, the short answer is that check-names is pretty granular, doing
"check-names response fail" is just asking for trouble, for a resolver at
the Internet edge, since there's too much squirrely stuff out there. Most
folks just limit check-names "fail" to authoritative dat
Validating input is good & rejecting invalid data is the way to go..
but has the Internet moved on and check-names is now too restrictive?
I have this bit in named.conf
check-names response fail;
# restrict the character set and syntax of domain names
# The rules for legal hostn
3 matches
Mail list logo
