From owner-freebsd-current@FreeBSD.ORG Thu Aug 2 04:05:20 2007 Return-Path: Delivered-To: freebsd-current@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 0DCBD16A418; Thu, 2 Aug 2007 04:05:20 +0000 (UTC) (envelope-from randy@psg.com) Received: from rip.psg.com (rip.psg.com [147.28.0.39]) by mx1.freebsd.org (Postfix) with ESMTP id E3A0A13C468; Thu, 2 Aug 2007 04:05:19 +0000 (UTC) (envelope-from randy@psg.com) Received: from localhost ([127.0.0.1] helo=roam.psg.com) by rip.psg.com with esmtp (Exim 4.67 (FreeBSD)) (envelope-from ) id 1IGRw5-0009tT-7n; Thu, 02 Aug 2007 04:05:17 +0000 Received: from localhost ([127.0.0.1] helo=roam.psg.com) by roam.psg.com with esmtp (Exim 4.67 (FreeBSD)) (envelope-from ) id 1IGRvk-0001Tv-A7; Wed, 01 Aug 2007 18:04:56 -1000 From: Randy Bush MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Message-ID: <18097.22498.575342.155398@roam.psg.com> Date: Wed, 1 Aug 2007 18:04:50 -1000 To: Peter Losher References: <46B01D5E.6050004@psg.com> <20070801110727.GC59008@menantico.com> <46B0EDEA.8050608@FreeBSD.org> <20070801211320.GE59008@menantico.com> <46B10A28.8000908@FreeBSD.org> <46B12E06.5030809@isc.org> Cc: Doug Barton , FreeBSD Stable , FreeBSD Current Subject: Re: default dns config change causing major poolpah X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 02 Aug 2007 04:05:20 -0000 > in addition nowhere does it state in RFC2870 that the root-servers have to > accept AXFR's as part of their service. in fact, the opposite 2.7 Root servers SHOULD NOT answer AXFR, or other zone transfer, queries from clients other than other root servers. This restriction is intended to, among other things, prevent unnecessary load on the root servers as advice has been heard such as "To avoid having a corruptible cache, make your server a stealth secondary for the root zone." The root servers MAY put the root zone up for ftp or other access on one or more less critical servers. randy