Silently drop queries for AAAA records

Karl Auer kauer at biplane.com.au
Tue Dec 7 23:14:41 UTC 2010


On Tue, 2010-12-07 at 16:31 -0600, David A. Evans wrote:
>         I would like to silently drop the AAAA record lookups instead
> of responding back with NXDOMAIN.  Thusly generating a performance hit
> as the application waits 2 seconds for the reply. 

Responding with NXDOMAIN will have a definite effect on your
recalcitrant application owner - it will stop the v4 lookup as well :-)
If you can do it just for him, that would be ideal.

If the application exists only at one or very few locations you could
rate limit inbound queries at your firewall.

Regards, K.

-- 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Karl Auer (kauer at biplane.com.au)                   +61-2-64957160 (h)
http://www.biplane.com.au/kauer/                   +61-428-957160 (mob)

GPG fingerprint: DA41 51B1 1481 16E1 F7E2 B2E9 3007 14ED 5736 F687
Old fingerprint: B386 7819 B227 2961 8301 C5A9 2EBC 754B CD97 0156
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 197 bytes
Desc: This is a digitally signed message part
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20101208/1d98ff5d/attachment.bin>


More information about the bind-users mailing list