refuse ANY queries

W.C.A. Wijngaards wouter at nlnetlabs.nl
Fri Aug 25 09:47:07 UTC 2017


Hi Petr,

Unbound already implements that draft.  Method 4.1, select one (actually
a couple) RRsets.  It picks them from cache if they are available there
(eg. A record or SOA record) and if no records are in cache, it'll make
a query.

There may be tricks with local-zones or local-data or python scripting
or views.

Best regards, Wouter

On 25/08/17 11:42, Petr Špaček via Unbound-users wrote:
> Hello,
> 
> is it possible to use some trick to configure Unbound to refuse ANY queries?
> 
> It would be helpful for (intentionally) open recursors before
> https://tools.ietf.org/html/draft-ietf-dnsop-refuse-any is implemented.
> 
> Thank you for your time.
> 


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: OpenPGP digital signature
URL: <http://lists.nlnetlabs.nl/pipermail/unbound-users/attachments/20170825/233943a0/attachment.bin>


More information about the Unbound-users mailing list