[dns-operations] dns-operations at lists.dns-oarc.net

[sthaug at nethelp.no]

> The OP asked about caching DNS servers.  In general, you should only be
> providing caching DNS services to your own network, not the Internet at
> large.  Inside your network, you should be implementing BCP38; you
> shouldn't have to deal with spoofing within your own network.

However, you might have to deal with open recursive servers and/or
open DNS proxies among your customers. Since they are inside your
network, they can ask your caching DNS servers.

Steinar Haug, Nethelp consulting, sthaug at nethelp.no