Invalid lan. and local. TLDs
marka at isc.org
Sun Aug 30 21:44:35 UTC 2009
In message <1251578984.4460.6.camel at jhorne.homelinux.net>, John Horne writes:
> On Sat, 2009-08-29 at 13:24 +1000, Mark Andrews wrote:
> > In message <twig.1251478975.23669 at swcp.com>, "Bill Larson" writes:
> > > John Horne <john.horne at plymouth.ac.uk> said:
> > >
> > > > Hello,
> > > >
> > > > I noticed one of the root servers stats
> > > > ( http://stats.l.root-servers.org/cgi-bin/dsc-grapher.pl?
> > > window=604800&plot=qtype_vs_invalid_tld&server=L-root ) of queried invalid
> > > TLDs, as at the moment we have no 'local.' or 'lan.' zones configured.
> > > Hence, any such queries from us go out to the Internet (sorry).
> > > >
> > > > I gather that these zones are used by MS and MAC servers to some extent,
> > > > so I am wondering if it would be better to simply create an empty zone
> > > > or one with a wildcard in it? Or does it make any difference? (I have no
> > > > idea what the zones are used for.)
> > >
> > Or one can just configure your recursive server as a stealth slave
> > of the root zone. You make a qery every hour or so and transfer
> > it twice a day.
> Many thanks for this. An interesting solution! I notice that this very
> question came up in 2004
> and note the concerns about NOTIFY.
You can configure servers not to send notify and the roots can
easily absorb the notify load if there is misconfuration. If this
was being done by default NOTIFY shouldn't be a issue, as the vendors
would turn non-explicit notify off as that would be part of a RFC
that recommends this.
> I am first going to install dnstop to see exactly what is going on.
Always a good idea to have data.
> John Horne, University of Plymouth, UK Tel: +44 (0)1752 587287
> E-mail: John.Horne at plymouth.ac.uk Fax: +44 (0)1752 587001
> bind-users mailing list
> bind-users at lists.isc.org
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742 INTERNET: marka at isc.org
More information about the bind-users