[dns-operations] Mozilla Firefox and ANY queries
Paul Wouters
paul at nohats.ca
Thu Mar 5 15:45:44 UTC 2015
On Thu, 5 Mar 2015, Tony Finch wrote:
>> * ANY always returns a TTL of 5 seconds.
>
> That 5 second TTL is an artefact of RPZ processing. By default BIND
> returns the upstream TTL in responses to ANY queries.
Really? Wouldn't that _contribute_ to DDOS attacks when the attacker
uses open recursives to attack the authoritative servers?
Paul
More information about the dns-operations
mailing list