Synthesized CNAME from NXDOMAIN

Paul Wouters paul at cypherpunks.ca
Thu Oct 3 21:54:08 UTC 2013


On Thu, 3 Oct 2013, Casey Deccio wrote:

> I would like to apply something similar to a "redirect" zone (for NXDOMAIN responses)

You are why we can't have nice things :P

We had enough Sitewinders. With DNSSEC on the endnode, your lies won't
be believed anway. What you are trying is wrong, bad and broken.

My laptop with unbound+dnssec-trigger would detect an attack and warn
me.

Paul


More information about the bind-users mailing list