queries for just a few domains fail (NXDOMAIN) for a bind 9.18 non-forwarding config ; forwarding does fix it. problem with 'my' config, or 'their' DNS ?
PGNet Dev
pgnet.dev at gmail.com
Wed Oct 26 00:12:22 UTC 2022
hi,
> AWS are returning NXDOMAIN instead of NOERROR for empty non terminals. Do you have strict
> qname minimisation turned on?
yup, i do
...
qname-minimization strict;
...
only because my i understood my reads of
BIND to Add QNAME Minimization
https://www.isc.org/blogs/bind-to-add-qname-minimization/
&
QNAME Minimization and Your Privacy
https://www.isc.org/blogs/qname-minimization-and-privacy/
to suggest that it's a GoodIdea(tm).
More information about the bind-users
mailing list