On 2018/05/17 19:06, Florian Obser wrote: > Two diffs for the price of one! > > 1) From upcomming nsd 4.1.22: > refuse-any sends truncation (+TC) in reply to ANY queries over UDP, > and allows TCP queries like normal.
OK. > 2) turn on minimal-reponses and refuse-any per default > > I think these are better / sane defaults. I agree, OK. What do you think about an commented-out entry in src/etc/nsd.conf for these settings? Partly to show people how to turn them off in case they have issues, partly to draw admin attention to it when they run sysmerge?