Re: An experimental RPZ plugin (was Re: Using a DLZ as RPZ?)
Ondřej Surý <[email protected]> Fri, 5 Dec 2025 17:57:40 +0100
| Newsgroups | gmane.network.dns.bind.user |
|---|---|
| Message-ID | <[email protected]> |
That works for authoritative to resolver. I am not really sure there are stub resolver that would honor the SOA TTL/minimum for negative caching. Perhaps something like full stub resolver (systemd-resolved) might, but generally speaking, I think the stub cache is small with short expiration. Ondrej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 5. 12. 2025, at 17:47, Jesus Cea <[email protected]> wrote: > > The SOA in ADDITIONAL in a NXDOMAIN response allow for negative caching, as described in RFC 2308. -- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list.