* Kevin Darcy: > I'm not sure those recommendations apply as strongly as they used > to. Now we have views and (if the original poster were to upgrade to > 9.4.x or higher) fine-grained control over access to cached data.
Views are probably okay. Access control is insufficient, especially if you register domains on behalf of customers. Typically, you need to activate these domains prior to obtaining the delegation, and the recursor will return incorrect data when you fail to actually get the delegation. _______________________________________________ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users