This archive is retained to ensure existing URLs remain functional. It will not contain any emails sent to this mailing list after July 1, 2024. For all messages, including those sent before and after this date, please visit the new location of the archive at https://mailman.ripe.net/archives/list/[email protected]/

[dns-wg] combining authoritative and recursive DNS service

• Previous message (by thread): [dns-wg] combining authoritative and recursive DNS service
• Next message (by thread): [dns-wg] NCC reverse delegation criteria

Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Tony Finch dot at dotat.at
Wed Jun 12 19:28:58 CEST 2019

If you allow remote servers to query your recursive servers (even if you
only allow RD=0 access to your authoritative zones), then it's very easy
for miscreants to deny service to your users. My resolvers reject TCP
connections from outside our network to avoid this issue, amongst other
techniques.

Tony.
-- 
f.anthony.n.finch  <dot at dotat.at>  http://dotat.at/
Northwest Viking: Northeasterly 6, veering southeasterly 4 or 5 later. Rough,
becoming moderate later. Rain. Good, occasionally poor.

• Previous message (by thread): [dns-wg] combining authoritative and recursive DNS service
• Next message (by thread): [dns-wg] NCC reverse delegation criteria

Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

[ dns-wg Archives ]