Re: Finer control over REFUSED, e.g. root referrals

2025-09-06 Thread Darren Ankney
Hi Fred, > It seems as though somehow that behavior is implicit in allowing / > disallowing recursion by the server. I think this is right. I think isc.org ns servers return "REFUSED" because they have recursion disabled and are not authoritative for what you have asked for ('.' TXT) (and you us

Re: Finer control over REFUSED, e.g. root referrals

2025-09-06 Thread Dan Mahoney
> On Sep 6, 2025, at 11:27, Fred Morris wrote: > > So I have a BIND server which is publicly exposed, but which is not > referenced from the canonical tree we call "The DNS". It serves as a firewall > / DNS "WAF" for resources which it recurses to obtain. Hey Fred, If you have a service on