[dns-operations] Fixing the "infinite AXFR" security issue (Was: DNS activities in Japan

Stephane Bortzmeyer bortzmeyer at nic.fr
Thu Jul 7 07:00:26 UTC 2016


On Thu, Jul 07, 2016 at 08:35:26AM +1000,
 Mark Andrews <marka at isc.org> wrote 
 a message of 42 lines which said:

> And 1G is too small for some zones.

We are just concerned about the *default* value. IMHO, it must be low,
to address the "ordinary" zone. People who manage zones > 1G are
typically professionnals, who can read the FM and change the default
value.



More information about the dns-operations mailing list