max-transfer-time-out ?

[Marc_Lampo at hotmail.com]

Hello,

would it be wise to have a "max-transfer-time-out" option ?

It seems such a setting is missing (but perhaps, of course,
the named might have a built-in limit ?).

The motivation is that by not setting an upper limit to the
time it may take for a transfer to take place, the named puts
some "trust" on the proper behaving of the partner asking for
the transfer.
Without a time-limit, what are the defenses of named against
a program that opens, but never reads, from possibly numerous
tcp connections for zone transfers.

Greetings,

Marc Lampo


Sent via Deja.com http://www.deja.com/
Before you buy.