<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=gb2312">
<META content="MSHTML 6.00.2900.6129" name=GENERATOR>
<STYLE>@font-face {
font-family: 宋体;
}
@font-face {
font-family: Verdana;
}
@font-face {
font-family: @宋体;
}
@page Section1 {size: 595.3pt 841.9pt; margin: 72.0pt 90.0pt 72.0pt 90.0pt; layout-grid: 15.6pt; }
P.MsoNormal {
TEXT-JUSTIFY: inter-ideograph; FONT-SIZE: 10.5pt; MARGIN: 0cm 0cm 0pt; FONT-FAMILY: "Times New Roman"; TEXT-ALIGN: justify
}
LI.MsoNormal {
TEXT-JUSTIFY: inter-ideograph; FONT-SIZE: 10.5pt; MARGIN: 0cm 0cm 0pt; FONT-FAMILY: "Times New Roman"; TEXT-ALIGN: justify
}
DIV.MsoNormal {
TEXT-JUSTIFY: inter-ideograph; FONT-SIZE: 10.5pt; MARGIN: 0cm 0cm 0pt; FONT-FAMILY: "Times New Roman"; TEXT-ALIGN: justify
}
A:link {
COLOR: blue; TEXT-DECORATION: underline
}
SPAN.MsoHyperlink {
COLOR: blue; TEXT-DECORATION: underline
}
A:visited {
COLOR: purple; TEXT-DECORATION: underline
}
SPAN.MsoHyperlinkFollowed {
COLOR: purple; TEXT-DECORATION: underline
}
SPAN.EmailStyle17 {
FONT-WEIGHT: normal; COLOR: windowtext; FONT-STYLE: normal; FONT-FAMILY: Verdana; TEXT-DECORATION: none; mso-style-type: personal-compose
}
DIV.Section1 {
page: Section1
}
UNKNOWN {
FONT-SIZE: 10pt
}
BLOCKQUOTE {
MARGIN-TOP: 0px; MARGIN-BOTTOM: 0px; MARGIN-LEFT: 2em
}
OL {
MARGIN-TOP: 0px; MARGIN-BOTTOM: 0px
}
UL {
MARGIN-TOP: 0px; MARGIN-BOTTOM: 0px
}
</STYLE>
</HEAD>
<BODY style="FONT-SIZE: 10pt; MARGIN: 10px; FONT-FAMILY: verdana">
<DIV><FONT face=Verdana size=2>How does ISP use a proxy to
filters answers
and returns whatever they want to the customer?</FONT></DIV>
<DIV><FONT face=Verdana size=2></FONT>
<DIV>
<HR>
</DIV>
<DIV><FONT color=#c0c0c0>Mingxing, Liu</FONT></DIV>
<DIV><FONT color=#c0c0c0>CNNIC</FONT></DIV>
<ADDRESS><A href="mailto:liumingxing@cnnic.cn"><FONT
color=#c0c0c0>liumingxing@cnnic.cn</FONT></A><FONT
color=#c0c0c0> </FONT></ADDRESS></DIV>
<HR color=#b5c4df SIZE=1>
<DIV><FONT face=Verdana size=2><STRONG>发件人：</STRONG> Michael Graff </FONT></DIV>
<DIV><FONT face=Verdana size=2><STRONG>发送时间：</STRONG> 2011-09-30 05:52:48
</FONT></DIV>
<DIV><FONT face=Verdana size=2><STRONG>收件人：</STRONG> owens </FONT></DIV>
<DIV><FONT face=Verdana size=2><STRONG>抄送：</STRONG> bind-users </FONT></DIV>
<DIV><FONT face=Verdana size=2><STRONG>主题：</STRONG> Re: NXDOMAIN redirection in
BIND 9.9 </FONT></DIV>
<DIV><FONT face=Verdana size=2></FONT> </DIV>
<DIV><FONT face=Verdana size=2>
<DIV>On Sep 29, 2011, at 4:06 PM, Bill Owens wrote:</DIV>
<DIV></DIV>
<DIV>> I've obviously been asleep and not following along with the announcements of new features in BIND 9.9 until today</DIV>
<DIV></DIV>
<DIV>I'm happy you read it, and hope to see you at the forum/customer webinar next week! I'll be speaking, and will bring my fireproof undies.</DIV>
<DIV></DIV>
<DIV>> . . . both Evan's blog post <http://www.isc.org/community/blog/201109/isc-bind-990a1-feature-preview> and the announcement of next week's webinar include NXDOMAIN redirection as the first new feature. I'm really surprised by that - is this something that BIND users were clamoring for?</DIV>
<DIV></DIV>
<DIV>Yes.</DIV>
<DIV></DIV>
<DIV>> Or is it a situation where other servers were providing this feature, and BIND needed it to maintain parity?</DIV>
<DIV></DIV>
<DIV>Yes.</DIV>
<DIV></DIV>
<DIV>> Obviously those of us who find this idea disturbing don't need to enable it, and DNSSEC provides an effective defense against those who would enable it* but it still leaves me curious.</DIV>
<DIV></DIV>
<DIV>We came to the conclusion that no matter how much we wanted it to not be true, people find a way to do NXDOMAIN if they want to. The issue is not ours to push, it's between the ISP and the customer ultimately, and people will do it -- and more intrusively -- than BIND 9.9 will.</DIV>
<DIV></DIV>
<DIV>> *except that perhaps those who enable this feature will use it as an excuse to avoid enabling validation, which would be a very bad result, IMO. . .</DIV>
<DIV></DIV>
<DIV>That's perhaps the case, but once again, it's up to the ISP ultimately. Don't think that just because BIND 9 didn't do this before, that people didn't. They instead use a proxy which filters answers, for instance, and returns whatever they want to the customer.</DIV>
<DIV></DIV>
<DIV>--Michael</DIV>
<DIV></DIV>
<DIV>_______________________________________________</DIV>
<DIV>Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list</DIV>
<DIV></DIV>
<DIV>bind-users mailing list</DIV>
<DIV>bind-users@lists.isc.org</DIV>
<DIV>https://lists.isc.org/mailman/listinfo/bind-users</DIV></FONT></DIV></BODY></HTML>