[dns-operations] DNS zone transfers are now illegal in North Dakota?

Paul Vixie paul at vix.com
Fri Jan 18 03:14:14 UTC 2008


> postive: zone transfers are used regularly for diagnotic purposes both by
> the administrators of the zone and by remote administrators attempting to
> diagnose operational problems both with the DNS and any services that use
> the DNS.
> 
> [I know I've done that to diagnose problems that were not reported by the
> owner of the zone.]

no doubt.  and these are good solid reasons.  but they won't convince a judge.

> ...
> positive: zone transfers are used to answer questions that won't fit in
> a standard TCP response. 
> 
> [I've had to do that in the past as well.  DNS needs the MORE bit.  AXFR
> was the prime example of why we needed the MORE bit.]

that's a new topic.  i refer you to the MD bit in the EDNS1 proposal, which
was part of that which was called "too complicated" by DNSIND at that time.



More information about the dns-operations mailing list