BIND 8.x, security, and delegations

[Cricket Liu]

> Thanks for the reply, not to mention the presentation on security!

Sure.

> Just to make sure that I understand, you're saying that the remote server
> is correctly being
> denied the A record by the security config and that fact is being logged,
> however my server is at the same time supplying the referral to the
delegated
> domain's name servers (which is not being logged), and that eventually the
> remote server gets the correct A record and the lookup succeeds.

Actually, I would think your name server wouldn't be returning the referral,
since the original query was denied.

cricket

Acme Byte & Wire
cricket at acmebw.com
www.acmebw.com

Attend our next DNS and BIND class!  See
www.acmebw.com/training.htm for the
schedule and to register for upcoming
classes.