Bind vs flood

[Phil Mayers]

I think Chris is right here. IIRC even qname policies perform an upstream query - we've seen this reflected in response times.

I don't know what it does for servfail but it would certainly be reasonable to pass them unchanged. Remember rpz is deliberately limited.
-- 
Sent from my phone with, please excuse brevity and typos
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20140228/2866315e/attachment-0001.html>