Dropping external recursive requests

[Mark Andrews]

In message <OF9D331B84.0E5B1574-ONC1257514.00803FD0-C1257514.00804D81 at sistinf.i
t>, Alberto Colosi/SI/RM/GSI/it writes:
> why not? beter handled by isc and done in a clean way then 1.000.000 of 
> dirty ways as these ;)

	Please go read RFC 5358.  No where in there does it say to
	drop responses.  If we though that dropping queries was a
	good idea it would have been explicitely documented in RFC
	5358.  Not offering recursive service means returning
	REFUSED.
 
> -------------------------------
> Alberto Colosi
> IBM Global Business Services
> Sistemi Informativi S.P.A.
> IT NetWork & Security Department
>  *-* *-* *-*
> SECURITY IS EVERYONE'S BUSINESS
> 
> Member of
> IBM Information Security WW CoP
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: Mark_Andrews at isc.org