Re: Is there any config to disable bind9 retry for rcode refused

Returning REFUSED to ANY is anti-pmsocial as it requires every resolver in the world to special case this  There are better mechanisms to deal with it like returning TC=1 or BADCOOKIE if there is only a client cookie or returning one of the RRsets at the name. -- Mark AndrewsOn 4 Mar 2025, at 18:21

Re: Is there any config to disable bind9 retry for rcode refused

Hi Neil. I don't think there is. Perhaps you should suggest it in a Gitlab issue? Just to be clear, though, please can you give an example of what you mean? A real life one would be best. Either a binary pcap or +vvv to screen of the query BIND makes and the REFUSED it receives followed by it retr

Is there any config to disable bind9 retry for rcode refused

Hi, I found that bind9 can retry for variant error rcode, which is very helpful. But there is one specific case for ANY response with rcode refused, retry from bind9 is not expected. Please advise if there is any config or method can achieve this. Thanks in advance! Neil Nie -- Visit https:/