Path: csiph.com!usenet.pasdenom.info!news.etla.org!nntp-feed.chiark.greenend.org.uk!ewrotcd!usenet-its.stanford.edu!usenet.stanford.edu!not-for-mail From: Carl Byington Newsgroups: comp.protocols.dns.bind Subject: Re: Response Policy Zone: disabling "leaking" of lookups Date: Wed, 02 Sep 2020 20:23:27 -0700 Lines: 19 Approved: bind-users@lists.isc.org Message-ID: References: <4ef66fdfdcae3d73aa3dd6df1b115fe37ac5675c.camel@byington.org> NNTP-Posting-Host: lists.isc.org Mime-Version: 1.0 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: 7bit X-Trace: usenet.stanford.edu 1599103422 27182 149.20.1.60 (3 Sep 2020 03:23:42 GMT) X-Complaints-To: action@cs.stanford.edu To: bind-users@lists.isc.org Return-Path: X-Original-To: bind-users@lists.isc.org Delivered-To: bind-users@lists.isc.org DKIM-Filter: OpenDKIM Filter v2.11.0 ns1.five-ten-sg.com 0833NR1u3177596 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=byington.org; s=default; t=1599103408; bh=fuWu1DsaogMdGe17zLXf7a2Ms4cPtF+HE+6CxBoomH8=; h=Subject:From:To:Date:In-Reply-To:References:From; b=A+yidK0SHvjSA+TBKMIXJI66Kml/mP4NU3ur4afO7PpdzuD4lRSav9mK1pMjdTyMS WAO6OqdlVoWrD7/4nAM7cEsOCIZ5BF42cRzEiykZvJtkDnmLt+8RwniNZWnksXQctC AzMuFdkSEmBHYN8PCZkgbhZLev54RilhbRlThYfA= In-Reply-To: X-Mailer: Evolution 3.28.5 (3.28.5-12.el8) X-Spam-Status: No, score=-2.2 required=5.0 tests=DKIM_SIGNED,DKIM_VALID, DKIM_VALID_AU,DKIM_VALID_EF,GPG_SIGNED,SPF_HELO_NONE,SPF_PASS autolearn=disabled version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on mx.pao1.isc.org X-BeenThere: bind-users@lists.isc.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: BIND Users Mailing List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-Mailman-Original-Message-ID: <4ef66fdfdcae3d73aa3dd6df1b115fe37ac5675c.camel@byington.org> X-Mailman-Original-References: Xref: csiph.com comp.protocols.dns.bind:16089 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 On Wed, 2020-09-02 at 17:47 -0700, Fred Morris wrote: > how do I disable the (useless) resolution directed at upstream > servers? Isn't that just "qname-wait-recurse no;" -----BEGIN PGP SIGNATURE----- iHMEAREKADMWIQSuFMepaSkjWnTxQ5QvqPuaKVMWwQUCX1BhpBUcY2FybEBmaXZl LXRlbi1zZy5jb20ACgkQL6j7milTFsFe7gCfVN8JVwC8eQ5RExIYVJkOVf3Ywc4A n1pCBkinzCzqBH9IYlXfp5sNeNh1 =Zfin -----END PGP SIGNATURE-----