Re: QNAME minimisation question

2025-06-03 Thread Greg Choules via bind-users
The help text for delv says you can specify a source using -b, the same as you can with dig: Usage: delv [@server] {q-opt} {d-opt} [domain] [q-type] [q-class] Where: domain is in the Domain Name System q-class is one of (in,hs,ch,...) [default: in] q-type is one of (a,any,mx,

Re: QNAME minimisation question

2025-06-03 Thread Nick Tait via bind-users
Hi Stace. The transport protocol used to ask the question is (or should be) independent of the question being asked. So in this case asking for a PTR record for an IPv6 address wouldn't change whether IPv4 or IPv6 is used to make the recursive queries. I've done a bit more testing on this, a

Re: QNAME minimisation question

2025-06-03 Thread Nick Tait via bind-users
On 03/06/2025 22:06, Petr Špaček wrote: I've created https://gitlab.isc.org/isc-projects/bind9/-/issues/5351 so we can improve logging. Your input on what sort of information is useful would be much appreciated. Thanks very much for that. I've added a comment. :-) -- Visit https://lists.isc.or

Re: QNAME minimisation question

2025-06-03 Thread Petr Špaček
On 6/3/25 11:29, Nick Tait wrote: On 02/06/2025 23:30, Petr Špaček wrote: In short, with an empty cache, BIND will exceed pre-configured limit on number of queries it can do. This is protection from various attacks which misuse DNS to attack itself. Thanks for the explanation! This particula

Re: QNAME minimisation question

2025-06-03 Thread Petr Špaček
On 6/3/25 12:06, Petr Špaček wrote: On 6/3/25 11:29, Nick Tait wrote: On 02/06/2025 23:30, Petr Špaček wrote: In short, with an empty cache, BIND will exceed pre-configured limit on number of queries it can do. This is protection from various attacks which misuse DNS to attack itself. Thanks

Re: QNAME minimisation question

2025-06-03 Thread Stacey Marshall
On 3 Jun 2025, at 10:29, Nick Tait via bind-users wrote: > But I also noticed that delv only makes A queries (not ), and even if I > specify "-6" on the command-line it makes no difference? Have yo tried using an IPv6 address with the -x option? delv -x :::45.90.5.195 +ns +qmin +maxque

Re: QNAME minimisation question

2025-06-03 Thread Nick Tait via bind-users
On 02/06/2025 23:30, Petr Špaček wrote: In short, with an empty cache, BIND will exceed pre-configured limit on number of queries it can do. This is protection from various attacks which misuse DNS to attack itself. Thanks for the explanation! This particular recursive query doesn't seem espe