[dns-operations] the slave verify the notify IP

Dnsbed Ops ops at dnsbed.com
Fri Dec 13 04:21:40 UTC 2013


Can this cause a DNS-Notify-Attack happens?
Thanks.

On 2013-12-13 11:47, Mark Andrews wrote:
> It's point is to stop the server from initiating refresh processing
> unless the message comes from a configured master.  This doesn't
> have to be a perfect filter.  The serial in the SOA record (if
> present) is just a hint as to whether you should start refresh
> processing or not.
>
> Notify doesn't stop normal refresh processing occuring.  It can
> just speed it up.



More information about the dns-operations mailing list