[dns-operations] anybody here from GDNS?

[Jo Rhett]

On Jul 15, 2008, at 9:55 AM, Randy Bush wrote:
> actually, i run two servers which are authoritative for O(10^4) zones
> and have recursion turned on.  the recursion is restricted to the  
> localhost.


Still vulnerable.  Better to run two separate servers -- one bound to  
127.0.0.1 and the auth servers bound to the external IPs.

-- 
Jo Rhett
Net Consonance : consonant endings by net philanthropy, open source  
and other randomness