One more thing: what about disabling search lists? Can't I make a rule
that "all FQDNs must be specified with a trailing dot (as documented to
stop the use of search lists)"?
You'd better test that thoroughly. Firefox still doesn't get the TLS host
header right, and Apache doesn't toss its breakfast anymore, but it ain't
pretty. Try https://apache.org./ if you don't believe me...
Good luck, and a good tomorrow...
--
Fred Morris
_______________________________________________
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe
from this list
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users
