Hello,
I have a question about mecanism for requests of long subdomains FQDN.
Our DNS, which is in recursive configuration, split long fqdn request with
subdomains requests like :
Original request from the client to our recursive DNS : A a.b.c.d.example.com
Requests done by our DNS to the domain
On 15.05.25 14:31, DEMBLANS Mathieu wrote:
I have a question about mecanism for requests of long subdomains FQDN.
Our DNS, which is in recursive configuration, split long fqdn request with
subdomains requests like :
Original request from the client to our recursive DNS : A a.b.c.d.example.com
On 15.05.25 14:31, DEMBLANS Mathieu wrote:
I have a question about mecanism for requests of long subdomains FQDN.
Our DNS, which is in recursive configuration, split long fqdn request with
subdomains requests like :
Original request from the client to our recursive DNS : A a.b.c.d.example.com
Am 15.05.2025 um 14:31:40 Uhr schrieb DEMBLANS Mathieu:
> It is problematic for DNSBL requests because it generate a lot of
> useless requests and this kind of service look at the number of
> requests done (usage policy):
Disable qname minimization for that.
--
Gruß
Marco
Send unsolicited bul
I was beaten to it!
It's called QNAME minimisation and is specified here:
https://datatracker.ietf.org/doc/html/rfc9156
In BIND it can be disabled with this statement:
https://bind9.readthedocs.io/en/v9.20.8/reference.html#namedconf-statement-qname-minimization
Hope that helps, Greg
On Thu, 15 M
Thanks, I didn't find this information during my search in archives.
I will disable it.
-Message d'origine-
De : bind-users De la part de Matus UHLAR -
fantomas
Envoyé : jeudi 15 mai 2025 17:02
À : bind-users@lists.isc.org
Objet : Re: long FQDN resolution
On 15.05.25 14:31, DEMBLA
i didn’t receive your reply but saw this on lists archive so replying to
you:
Do be aware that Ondrej is a member of ISC, the organization that
develops
BIND. He is also one of the maintainers of the Debian release of BIND
which
you are using.
Why should i be aware? Is he is a threat or so
Matus UHLAR - fantomas skrev den 2025-05-15 17:04:
turn off QNAME minimisation on DNS servers used by mailservers for
DNSBL/DNSWL checks.
make a better rbldnsd that support qname :)
or dump zone from rbldnsd to bind.zone, the bind zone can be in sqlite
to not be so memory hungry
or report
8 matches
Mail list logo
