unbound asks for A record, when txt requested

Petr Špaček petr.spacek at nic.cz
Fri Sep 13 08:55:06 UTC 2019


On 13. 09. 19 10:27, Paul Vixie wrote:
> Petr Špaček via Unbound-users wrote on 2019-09-13 01:15:
>> ...
>>
>> Any implementation which is unable to respond to well-formed queries
>> is just broken and there is no excuse for it.
> 
> in DNS RRL (www.redbarn.org/dns/ratelimits) a motive and a method is described whereby queries which appear to be uselessly duplicative are dropped without response. this is the main method of managed nonparticipation in DNS-amplified DDoS attacks.
> 
> perhaps this is exempted from your otherwise broad statement, since the implementation of DNS RRL does not render an implementation "unable" to respond to all well-formed queries, but rather, "unwilling" to do so.

DDoS is a special case, of course.

-- 
Petr Špaček  @  CZ.NIC



More information about the Unbound-users mailing list