DNS security, amplification attacks and recursion

Brett Delmage Brett at BrettDelmage.ca
Tue Jul 7 22:17:33 UTC 2020


On Tue, 7 Jul 2020, Tony Finch wrote:

> Brett Delmage <Brett at BrettDelmage.ca> wrote:
>> On Tue, 7 Jul 2020, Tony Finch wrote:
>>>
>>> 	minimal-any yes;
>>
>> Why only reduce and not eliminate?
>
> The reason is a bit subtle. If an ANY query comes via a recursive
> resolver, it is much better to give the resolver an answer so that it will
> put an entry in its cache...

This is a very interesting and clear explanation. Thanks for taking the 
time to share this Tony. TIL :-)

Brett



More information about the bind-users mailing list