<div dir="ltr"><br><br><div class="gmail_quote"><div dir="ltr">On Thu, Jan 7, 2016 at 3:25 PM Reindl Harald <<a href="mailto:h.reindl@thelounge.net">h.reindl@thelounge.net</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><br>
<br>
Am 07.01.2016 um 21:18 schrieb G.W. Haywood:<br>
> Hi there,<br>
><br>
> On Thu, 7 Jan 2016, Reindl Harald wrote:<br>
><br>
>> ... when somebody wants a information which exists in<br>
>> the DNS he can ask for that information - unconditionally<br>
<br>
you don't get it<br>
<br>
if i want to ask for your SOA or NS-records then i ask for them<br>
<br>
there is *NO POINT* you can prohibit that unless you need a working<br>
nameserver and the only thing you *could* achieve is that i need more<br>
queries than normally needed raising the load on your own namesever<br>
<br>
what would happen if you can achieve it:<br>
<br>
* in the best case no difference<br>
* in the worst case broken clients and degraded service<br>
<br>
prohibit things just for the sake of prohibit them is clueless,<br>
dangerous and unless you have a *real good* reason for your goal you<br>
should ask yourself if you *really* have the knowledge to maintain<br>
public nameservers - sorry - impossible to say that more polite<br>
<br>
> laptop3:~$ >>> dig -t any <a href="http://lloyds.co.uk" rel="noreferrer" target="_blank">lloyds.co.uk</a><br>
<br>
tells me that there is another clueless idiot degrading services as it<br>
often happens - the larger the comapny the more foolish admins<br>
<br>
WHAT do the gain with it?<br>
NOTHING<br>
<br></blockquote><div><br></div><div>Reindl, did you read the draft referred to in the HINFO? ( <a href="https://datatracker.ietf.org/doc/draft-ietf-dnsop-refuse-any/">https://datatracker.ietf.org/doc/draft-ietf-dnsop-refuse-any/</a> ). It clearly outlines the reasons that cloudfare is doing this. This document was discussed in the DNSOP WG, and was presented at a few meetings.</div><div>The consensus within the DNSOP WG was to adopt and work on the draft, so I object to your characterization of this as "another clueless idiot degrading services" at a large company.</div><div>Olafur and Joe (the authors of this) are far from clueless idiots. </div><div>In addition, please try to moderate your tone - people come to the BIND Users list for assistance - your argumentative (and often insulting) posts are not helpful to building a community.</div><div><br></div><div>W</div><div><br></div><div> </div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
> ; <<>> DiG 9.9.5-9+deb8u4-Debian <<>> -t any <a href="http://lloyds.co.uk" rel="noreferrer" target="_blank">lloyds.co.uk</a><br>
> ;; global options: +cmd<br>
> ;; Got answer:<br>
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 21502<br>
> ;; flags: qr rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 2, ADDITIONAL: 1<br>
><br>
> ;; OPT PSEUDOSECTION:<br>
> ; EDNS: version: 0, flags:; udp: 4096<br>
> ;; QUESTION SECTION:<br>
> ;<a href="http://lloyds.co.uk" rel="noreferrer" target="_blank">lloyds.co.uk</a>. IN ANY<br>
><br>
> ;; ANSWER SECTION:<br>
> <a href="http://lloyds.co.uk" rel="noreferrer" target="_blank">lloyds.co.uk</a>. 3789 IN HINFO "Please stop asking for<br>
> ANY" "See draft-jabley-dnsop-refuse-any"<br>
> <a href="http://lloyds.co.uk" rel="noreferrer" target="_blank">lloyds.co.uk</a>. 137094 IN NS <a href="http://dina.ns.cloudflare.com" rel="noreferrer" target="_blank">dina.ns.cloudflare.com</a>.<br>
> <a href="http://lloyds.co.uk" rel="noreferrer" target="_blank">lloyds.co.uk</a>. 137094 IN NS <a href="http://matt.ns.cloudflare.com" rel="noreferrer" target="_blank">matt.ns.cloudflare.com</a>.<br>
><br>
> ;; AUTHORITY SECTION:<br>
> <a href="http://lloyds.co.uk" rel="noreferrer" target="_blank">lloyds.co.uk</a>. 137094 IN NS <a href="http://matt.ns.cloudflare.com" rel="noreferrer" target="_blank">matt.ns.cloudflare.com</a>.<br>
> <a href="http://lloyds.co.uk" rel="noreferrer" target="_blank">lloyds.co.uk</a>. 137094 IN NS <a href="http://dina.ns.cloudflare.com" rel="noreferrer" target="_blank">dina.ns.cloudflare.com</a>.<br>
><br>
> ;; Query time: 54 msec<br>
> ;; SERVER: 192.168.44.72#53(192.168.44.72)<br>
> ;; WHEN: Thu Jan 07 20:17:18 GMT 2016<br>
> ;; MSG SIZE rcvd: 197<br>
<br>
_______________________________________________<br>
Please visit <a href="https://lists.isc.org/mailman/listinfo/bind-users" rel="noreferrer" target="_blank">https://lists.isc.org/mailman/listinfo/bind-users</a> to unsubscribe from this list<br>
<br>
bind-users mailing list<br>
<a href="mailto:bind-users@lists.isc.org" target="_blank">bind-users@lists.isc.org</a><br>
<a href="https://lists.isc.org/mailman/listinfo/bind-users" rel="noreferrer" target="_blank">https://lists.isc.org/mailman/listinfo/bind-users</a></blockquote></div></div>