Negative zones; NXDOMAIN responses

[Doug Barton]

On 05/21/2013 12:39 AM, Phil Mayers wrote:
> On 05/21/2013 08:23 AM, Matus UHLAR - fantomas wrote:
>> On 21.05.13 11:03, Mark Andrews wrote:
>>>     The simplest solution is to slave the root zone and
>>>     turn off notify to so you don't spam the official
>>>     root servers.  192.5.5.241 is f.root-servers.net.
>>>
>>> zone "." IN {
>>>        type slave;
>>>        file "slave/root";
>>>        masters { 192.5.5.241; };
>>>        notify no;
>>> };
>>
>> I thought this is not oficially recommended for ordinary users to prevent
>> root servers from being overloaded (transfers use much more resources
>> than
>> ordinary lookups). Has this changed?
>
> ICANN run a specifc AXFR service for various infrastructure zones:
>
> http://dns.icann.org/services/axfr/
>
> ...which IIRC some configs for root-slaving (FreeBSD?) use by default.

It's not used by default, but it is in the config, commented out.