Not able to resolve a domain

Evan Hunt each at isc.org
Fri Nov 18 16:33:55 UTC 2011


> 1. When was 1/8 allocated, recently? Maybe you need to update your
>    bogon filter?

That's my guess.  1.0.0.0/8 was one of the last network blocks
allocated--last April, IIRC--and prior to that time it was often
filtered because it was commonly used in spoofing attacks.

In fact, the BIND 9 documentation contains a sample blackhole ACL
which, until recently, specifically recommended filtering addresses
in that block.  The advice is outdated but I think someone is still
following it.

-- 
Evan Hunt -- each at isc.org
Internet Systems Consortium, Inc.



More information about the bind-users mailing list