Synthesized CNAME from NXDOMAIN
Paul Wouters
paul at cypherpunks.ca
Thu Oct 3 21:54:08 UTC 2013
On Thu, 3 Oct 2013, Casey Deccio wrote:
> I would like to apply something similar to a "redirect" zone (for NXDOMAIN responses)
You are why we can't have nice things :P
We had enough Sitewinders. With DNSSEC on the endnode, your lies won't
be believed anway. What you are trying is wrong, bad and broken.
My laptop with unbound+dnssec-trigger would detect an attack and warn
me.
Paul
More information about the bind-users
mailing list