Suboptimal behavior from nsd

Roy Arends roy at logmess.com
Thu Jan 8 14:20:57 UTC 2004


On Thu, 8 Jan 2004, Stephane Bortzmeyer wrote:

> This behaviour is probably legal (you put as many things you want in
> the Additional section, after all),

NSD behaviour is legal, and the most optimal.

A resolver must discard out-of-bailiwick, to be spoof-proof.
A server must not send out-of-bailiwick.

> but clearly sub-optimal (BIND 8 and BIND 9 do not exhibit this
> behaviour).

In effect, sending extra information in the additional section is
suboptimal in 2 ways.  A Bigger Packet. Less Secure.

Roy



More information about the nsd-users mailing list