Re: Set NSD to ignore, instead of refusing, external recursive queries?
Paul Wouters <[email protected]>
| Newsgroups | gmane.network.dns.nsd.general |
|---|---|
| Message-ID | <[email protected]> |
On Tue, 6 Jun 2017, Sebastian Nielsen wrote: >>> Is it possible to tell NSD to just drop recursive queries, instead of replying with a “REFUSED” message? >> >> Why do you want to receive double the queries? > What do you mean? If a real DNS client is sending you a query, and it does not get a response, it will likely try 2 more times. By not answering, you will get double or tripple the traffic. > Some security scans say the following: > > External Query: > Rejected (Recommended: Drop) > > And list it as a yellow status. Some security software needs to hire some DNS people :) Paul _______________________________________________ nsd-users mailing list [email protected] https://open.nlnetlabs.nl/mailman/listinfo/nsd-users