Re: djbdns: Current recommended patches?

On 5/22/09 1:34 PM, Matthew Dempsky wrote:
> On Fri, May 22, 2009 at 12:06 PM, David Nicol<[email protected]>  wrote:
>> Would it make sense to set up a bad-dns.org kind of like
>> trusted-forwarders.org which would be a public fallback search domain when a
>> search times out?
>
> I took the old fashioned and backwards compatible approach: I pointed
> out the problem to the levkowetz.com admin and suggested a fix, which
> he then promptly implemented. :)

Somewhat related to this, I created a patch some years ago that printed the 
number of "work units" required for a given query. If that was added to the 
log output, a script could be created to find your "top 100" queries in terms 
of work required and those could then be submitted to a site for public 
shaming (or for reference as [email protected] mentioned).

Also, it would be nice to have a way to tweak the max work units allowed 
before giving up so that when you run into some microsoft or other highly 
cdn'd site or levkowetz.com, etc - you could raise the work limit to allow 
those queries to complete without having to recompile.

Those 2 patches together would create easier ways for average users to find, 
analyze and possibly "fix" certain categories of problem queries and possible 
malicious looping of dns records by spammers and/or other bad people.