Re: An experimental RPZ plugin (was Re: Using a DLZ as RPZ?)
Ondřej Surý <[email protected]> Fri, 5 Dec 2025 17:57:40 +0100
| Newsgroups | gmane.network.dns.bind9.user |
|---|---|
| Message-ID | <A0635045-0DAB-49BB-84BF-DB7076696F16__44125.0164456264$1764953890$gmane$org@isc.org> |
That works for authoritative to resolver. I am not really sure there are stub resolver that would honor the SOA TTL/minimum for negative caching. Perhaps something like full stub resolver (systemd-resolved) might, but generally speaking, I think the stub cache is small with short expiration. Ondrej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 5. 12. 2025, at 17:47, Jesus Cea <[email protected]> wrote: > > The SOA in ADDITIONAL in a NXDOMAIN response allow for negative caching, as described in RFC 2308. -- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list.