Slowing down bind answers ?

Phil Mayers p.mayers at imperial.ac.uk
Sun Jan 5 14:13:49 UTC 2014


On 05/01/2014 13:25, Timothe Litt wrote:

> To get people's attention, NXDOMAIN to www.* queries is often reasonably

Interesting idea; implemented how?

> It may be better to simply alias (if necessary, route) the old IP

Piece of advice for anyone not already doing this; when you deploy 
recursive resolvers, do them on "portable" IPs, not IPs from the subnet 
they live on, and direct the DNS traffic to them with static /32 or /128 
routes. You'll be glad you did later.

> instructions on how to reconfigure.  If you have the ownership data,

If you don't, you've got big(ish) problems ;o)


More information about the bind-users mailing list