<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 TRANSITIONAL//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; CHARSET=UTF-8">
<META NAME="GENERATOR" CONTENT="GtkHTML/3.28.3">
</HEAD>
<BODY>
On Thu, 2013-09-19 at 16:04 -0700, Michael McNally wrote:
<BLOCKQUOTE TYPE=CITE>
<PRE>
New versions of BIND are now available from <A HREF="http://www.isc.org/downloads">http://www.isc.org/downloads</A>
</PRE>
</BLOCKQUOTE>
<BR>
<BR>
New Features 9.9.4<BR>
<BR>
Added Response Rate Limiting (RRL) functionality to reduce the<BR>
effectiveness of DNS as an amplifier for reflected denial-of-service<BR>
attacks by rate-limiting substantially-identical responses. [RT<BR>
#28130]<BR>
<BR>
I have been using this since 9.9.4bx, and although documentation is/was lacking at the time, so there might be a whitelisting somewhere , but in its absence, I highly advise against using RRL if your mail servers use those DNS servers<BR>
<BR>
</BODY>
</HTML>