[dns-operations] query dropping vs. returning nxdomain
brett at the-watsons.org
Wed Mar 15 20:54:34 UTC 2006
On Mar 15, 2006, at 1:20 PM, Jim Reid wrote:
> People often stumble on a stub resolver setup that
> works (sort of) despite it being sub optimal or completely wrong.
> This even happens in controlled networks.
indeed. it might (or might not) shock some to know that many
enterprise dns clients (dmz hosts, firewalls, etc) i encountered in
the past 3 years used 188.8.131.52 as a default resolver! to make matters
worse, i discovered that previous consultants before me would tell
the customer that was the right thing to do (as in "that name server
is open to everyone, so use it").
More information about the dns-operations