<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 TRANSITIONAL//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; CHARSET=UTF-8">
<META NAME="GENERATOR" CONTENT="GtkHTML/3.28.3">
</HEAD>
<BODY>
On Fri, 2013-09-20 at 01:59 +0000, Vernon Schryver wrote:
<BLOCKQUOTE TYPE=CITE>
<PRE>
> From: Noel Butler <<A HREF="mailto:noel.butler@ausics.net">noel.butler@ausics.net</A>>
> now, I never ran it as patches, my policy is only use official upstream
> sources, so my first play around was with 9.9.3.b2 I think it was.
BIND 9.9.4 and its immediately preceding "beta" and "release
candidate" releases are the first versions of BIND that were not
"patched." Some third parties including FreeBSD and a Linux
distributor added RRL patches to their versions, but those BIND+RRL
versions differed from any other version of BIND+RRL patch only by
someone else having applied the patch.
</PRE>
</BLOCKQUOTE>
<BR>
yeah, as I said, I thought it was that beta, I dont use distros versions of key daemons, most are too outdated for my liking, even Slackware and Gentoo, whoich are more current than most.
<BLOCKQUOTE TYPE=CITE>
<PRE>
> plenty of delayed mail - hostname lookup failures (mostly because of
> URI/DNS BL's), so it certainly works as intended :)
That sounds unrelated to RRL. Again, RRL affects standards compliant
DNS clients no more than a 50% packet loss rate on the path from the
DNS client and to the server. If your mail system suffered hostname
lookup failures, then I think something else was broken.
</PRE>
</BLOCKQUOTE>
<BR>
Nope, either way, daemon.log was filling up with messages indicating RRL, last time I tried, Aug 29,<BR>
<BR>
lots of <BR>
limit NXDOMAIN responses to xxxxxxxx/24 for zen.spamhaus.org , <BR>
limit NXDOMAIN responses to xxxxxx/24 for xxx.net <BR>
<BR>
pretty much one for every DNSBL, URIBL etc used.... <BR>
<BR>
The problem occurred within a minute of enabling RRL, and ended right after disabling RRL.<BR>
on that date, log files show the version was actually BIND 9.9.4rc1<BR>
<BR>
Now I've read your link, I can perhaps understand more the options and fine tune it, but bout to head out for lunch so, might pla around later this afternoon.<BR>
<BR>
<BR>
</BODY>
</HTML>