How to suppress ADDITIONAL SECTION per zone

[John Wobus]

> Other possibility is to implement packet rate limiting - a patch was
> discussed here a few days/weeks ago.

I endorse this suggestion: we were faced with such attacks and were
naturally leery about issues we might run into running a patched bind
and the additional tuning it could require.  Our experience is: the RRL
patch, used with its default parameters, simply does the job.

John
Cornell University IT