<html aria-label="message body"><head><meta http-equiv="content-type" content="text/html; charset=us-ascii"></head><body style="overflow-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;"><font face="Calibri"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">Hello BIND users,</span><br style="box-sizing: border-box; font-size: 18px;"><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">We have just published an Operational Notification at https://kb.isc.org/docs/strict-glue, which is included below. This is an issue you should be aware of, but it is not a software vulnerability, so there is no associated updated version of BIND. </span><br style="box-sizing: border-box; font-size: 18px;"><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">- ISC Support</span><br style="box-sizing: border-box; font-size: 18px;"><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">--------------------------</span><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">DOCUMENT VERSION: 1.0</span><br style="box-sizing: border-box; font-size: 18px;"><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">POSTING DATE: 15 December 2025</span><br style="box-sizing: border-box; font-size: 18px;"><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">CANONICAL URL: </span><span class="clickylink" style="box-sizing: border-box; font-size: 18px;"><a target="_blank" href="https://kb.isc.org/docs/strict-glue" style="box-sizing: border-box; color: rgb(102, 102, 102); text-decoration: none;">https://kb.isc.org/docs/strict-glue</a></span><br style="box-sizing: border-box; font-size: 18px;"><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">PROGRAM IMPACTED: BIND</span><br style="box-sizing: border-box; font-size: 18px;"><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">VERSIONS AFFECTED:</span><br style="box-sizing: border-box; font-size: 18px;"><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">* BIND 9.18.41 and later</span><br style="box-sizing: border-box; font-size: 18px;"><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">* BIND 9.20.15 and later</span><br style="box-sizing: border-box; font-size: 18px;"><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">* BIND 9.21.14 and later</span><br style="box-sizing: border-box; font-size: 18px;"><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">DESCRIPTION:</span><br style="box-sizing: border-box; font-size: 18px;"><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">BIND versions released in October 2025 included changes in how BIND</span><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">processes referrals in delegations. BIND now only trusts glue records if,</span><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">in the associated NS record, the target name (right side) is a subdomain of</span><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">the owner name (left side). Glue associated with other names is ignored,</span><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">and those names are iteratively resolved instead. This enhances the</span><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">security posture of BIND, but some unintended side effects may also be</span><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">encountered. Operators should be aware of the potential consequences.</span><br style="box-sizing: border-box; font-size: 18px;"><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">EXAMPLE:</span><br style="box-sizing: border-box; font-size: 18px;"><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">Consider the following hypothetical delegations for <example.org.> from the</span><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);"><com.> top-level-domain.</span><br style="box-sizing: border-box; font-size: 18px;"><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">The glue in the following delegation would be accepted:</span><br style="box-sizing: border-box; font-size: 18px;"><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">example.org. NS ns1.example.org.</span><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">example.org. NS ns2.example.org.</span><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">ns1.example.org. A 198.51.100.42</span><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">ns2.example.org. A 203.0.113.53</span><br style="box-sizing: border-box; font-size: 18px;"><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">The glue in the following delegation would now be ignored (in prior</span><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">versions, it was acceptable). Instead, BIND will now proceed to resolve</span><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);"><isc.org.>, and obtain NS and A records from the authoritative servers.</span><br style="box-sizing: border-box; font-size: 18px;"><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">example.org. NS ns1.isc.org.</span><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">example.org. NS ns2.isc.org.</span><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">ns1.isc.org. A 149.20.2.26</span><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">ns2.isc.org. A 199.6.1.52</span><br style="box-sizing: border-box; font-size: 18px;"><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">IMPACT:</span><br style="box-sizing: border-box; font-size: 18px;"><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">* Increased outgoing queries:</span><br style="box-sizing: border-box; font-size: 18px;"><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">- BIND resolvers may make an increased number of outgoing queries in</span><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">the process of following referrals.</span><br style="box-sizing: border-box; font-size: 18px;"><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">- In some cases, referrals to nameservers will themselves result in a</span><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">new nameserver lookup. This can even repeat for longer chains of</span><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">nested lookups.</span><br style="box-sizing: border-box; font-size: 18px;"><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">- The increased number of lookups may result in queries which</span><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">previously worked, now exceeding configured limits</span><br style="box-sizing: border-box; font-size: 18px;"><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">- This often manifests as a query which gets SERVFAIL on the first</span><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">try, but works on a subsequent attempt, after some intermediate</span><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">records have already been cached.</span><br style="box-sizing: border-box; font-size: 18px;"><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">* Broken delegations may be uncovered:</span><br style="box-sizing: border-box; font-size: 18px;"><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">- Glue records may have accidentally been hiding problems with the</span><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">authoritative records</span><br style="box-sizing: border-box; font-size: 18px;"><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">- Now BIND will find the authoritative records, which may have been</span><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">broken all along</span><br style="box-sizing: border-box; font-size: 18px;"><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">- This often manifests as a domain that "was working" yielding</span><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">SERVFAIL or behaving inconsistently, after updating a BIND resolver</span><br style="box-sizing: border-box; font-size: 18px;"><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">SOLUTION:</span><br style="box-sizing: border-box; font-size: 18px;"><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">* Zone administrators should:</span><br style="box-sizing: border-box; font-size: 18px;"><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">- Avoid long chains of nested referrals to new sets of name servers</span><br style="box-sizing: border-box; font-size: 18px;"><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">- Avoid cyclic referrals entirely (A refers to B, B refers to A)</span><br style="box-sizing: border-box; font-size: 18px;"><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">- Ensure glue records are consistent with records elsewhere</span><br style="box-sizing: border-box; font-size: 18px;"><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">- Ensure NS records are consistent between parent and child zones</span><br style="box-sizing: border-box; font-size: 18px;"><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">- Review all relevant records when changes are made, to maintain the</span><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">above over time</span><br style="box-sizing: border-box; font-size: 18px;"><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">* Resolver administrators should:</span><br style="box-sizing: border-box; font-size: 18px;"><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">- Be alert for trouble resulting from this change</span><br style="box-sizing: border-box; font-size: 18px;"><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">- Adjust configuration parameters as appropriate to find a balance</span><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">between operational efficiency and any corresponding security</span><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">exposure</span><br style="box-sizing: border-box; font-size: 18px;"><br style="box-sizing: border-box; font-size: 18px;"><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">The configuration parameters most likely to be involved are:</span><br style="box-sizing: border-box; font-size: 18px;"><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">* max-query-count</span><br style="box-sizing: border-box; font-size: 18px;"><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">Iterative queries sent while resolving a single client query.</span><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">Cumulative across CNAME redirections.</span><br style="box-sizing: border-box; font-size: 18px;"><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">* max-recursion-queries</span><br style="box-sizing: border-box; font-size: 18px;"><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">Iterative queries sent while resolving a single name. Each CNAME</span><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">redirection begins a new counter at zero.</span><br style="box-sizing: border-box; font-size: 18px;"><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">* max-recursion-depth</span><br style="box-sizing: border-box; font-size: 18px;"><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">Depth of nesting while resolving a single name. For example, when an</span><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">NS record targets another domain, and that domain has an NS record</span><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">that targets a third name, and so on.</span><br style="box-sizing: border-box; font-size: 18px;"><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">DIAGNOSTICS:</span><br style="box-sizing: border-box; font-size: 18px;"><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">Log messages regarding these and similar limits are logged in the "resolver"</span><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">category, at debug level 3. Routinely logging at debug levels is usually</span><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">not recommended, due to the significant performance impact. It may be</span><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">appropriate on a small scale, such as a test lab, or a server collecting</span><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">samples.</span><br style="box-sizing: border-box; font-size: 18px;"><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">To examine why a given name is not resolving, the "delv" tool with the</span><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">"+ns" switch can be used (available in BIND 9.20 and later). This</span><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">instantiates a full nameserver instance in the delv process, and uses it to</span><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">resolve the given query. The "-d" switch can be used to specify the debug</span><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">level. For example (all one line):</span><br style="box-sizing: border-box; font-size: 18px;"><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">delv -d3 +ns failing-name.example.com. A | grep -i -e fail -e exceed</span><br style="box-sizing: border-box; font-size: 18px;"><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">WORKAROUNDS:</span><br style="box-sizing: border-box; font-size: 18px;"><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">Resolver administrators who find BIND can no longer resolve names for a</span><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">domain with broken glue can use a "static-stub" zone in their "named.conf" to</span><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">override published NS records and force a given set of name servers be used</span><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">to resolve the domain. For example:</span><br style="box-sizing: border-box; font-size: 18px;"><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">// work around broken glue for "example.com" domain</span><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">zone "example.com." {</span><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">type static-stub;</span><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">server-addresses {</span><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">198.51.100.42; // ns1.example.com</span><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">203.0.113.53; // ns2.example.com</span><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">};</span><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">};</span><br style="box-sizing: border-box; font-size: 18px;"><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">Note that long-term use of static-stub is not recommended. It is intended</span><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">to be used as a short-term workaround until a problem can be corrected.</span><br style="box-sizing: border-box; font-size: 18px;"><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">DOCUMENT REVISION HISTORY:</span><br style="box-sizing: border-box; font-size: 18px;"><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">* 1.0 Initial publication, 15 December 2025</span><br style="box-sizing: border-box; font-size: 18px;"><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">DO YOU STILL HAVE QUESTIONS?</span><br style="box-sizing: border-box; font-size: 18px;"><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">Questions regarding this notification should be mailed to</span><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">bind-security@isc.org or posted as confidential GitLab issues at</span><br style="box-sizing: border-box; font-size: 18px;"><span class="clickylink" style="box-sizing: border-box; font-size: 18px;"><a target="_blank" href="https://gitlab.isc.org/isc-projects/bind9/-/issues/new?issue" style="box-sizing: border-box; color: rgb(102, 102, 102); text-decoration: none;">https://gitlab.isc.org/isc-projects/bind9/-/issues/new?issue</a></span><span style="font-size: 18px; background-color: rgb(255, 255, 255);">[confidential]=true</span><br style="box-sizing: border-box; font-size: 18px;"><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">ISC SECURITY VULNERABILITY DISCLOSURE POLICY:</span><br style="box-sizing: border-box; font-size: 18px;"><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">Details of our current security advisory policy and practice can be found</span><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">in the ISC Software Defect and Security Vulnerability Disclosure Policy at</span><br style="box-sizing: border-box; font-size: 18px;"><span class="clickylink" style="box-sizing: border-box; font-size: 18px;"><a target="_blank" href="https://kb.isc.org/docs/aa-00861" style="box-sizing: border-box; color: rgb(102, 102, 102); text-decoration: none;">https://kb.isc.org/docs/aa-00861</a></span><br style="box-sizing: border-box; font-size: 18px;"><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">HOW TO SUBMIT A BUG REPORT TO ISC:</span><br style="box-sizing: border-box; font-size: 18px;"><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">If you have encountered a problem with BIND (or with any other ISC</span><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">software), details on how to submit a report can be found at</span><br style="box-sizing: border-box; font-size: 18px;"><span class="clickylink" style="box-sizing: border-box; font-size: 18px;"><a target="_blank" href="https://www.isc.org/reportbug/" style="box-sizing: border-box; color: rgb(102, 102, 102); text-decoration: none;">https://www.isc.org/reportbug/</a></span><br style="box-sizing: border-box; font-size: 18px;"><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">LEGAL DISCLAIMER:</span><br style="box-sizing: border-box; font-size: 18px;"><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">Internet Systems Consortium (ISC) is providing this notice on an "AS IS"</span><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">basis. No warranty or guarantee of any kind is expressed in this notice and</span><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">none should be implied. ISC expressly excludes and disclaims any warranties</span><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">regarding this notice or materials referred to in this notice, including,</span><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">without limitation, any implied warranty of merchantability, fitness for a</span><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">particular purpose, absence of hidden defects, or of non-infringement. Your</span><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">use or reliance on this notice or materials referred to in this notice is</span><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">at your own risk. ISC may change this notice at any time. A stand-alone</span><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">copy or paraphrase of the text of this document that omits the document URL</span><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">is an uncontrolled copy. Uncontrolled copies may lack important</span><br style="box-sizing: border-box; font-size: 18px;"><span style="font-size: 18px; background-color: rgb(255, 255, 255);">information, be out of date, or contain factual errors.</span></font></body></html>