Advisory Notice for Bind Default Configuration and Reflector Attacks

[Paul Vixie]

# Is this a bug in the allow-query checking or am I missing something in
# my settings?  I am running 9.3.2 in case it matters.

i think it could be a bug in the allow-checking handling, since the initial
name is in a zone and that's the only name the requestor knows about.  but
you should be able to work around it by adding a stub zone for internic.net.