Advisory Notice for Bind Default Configuration and Reflector Attacks

Paul Vixie paul at
Fri Mar 24 06:40:57 UTC 2006

# Is this a bug in the allow-query checking or am I missing something in
# my settings?  I am running 9.3.2 in case it matters.

i think it could be a bug in the allow-checking handling, since the initial
name is in a zone and that's the only name the requestor knows about.  but
you should be able to work around it by adding a stub zone for

More information about the bind-workers mailing list