disable recursion by attackers (yes, attackers do use recursion to perform DoS).

This commit is contained in:
itojun 2006-03-23 13:50:44 +00:00
parent 046e0fba2e
commit 682cc4ce96
1 changed files with 2 additions and 1 deletions

View File

@ -1,4 +1,4 @@
# $NetBSD: named.conf,v 1.3 2005/11/29 21:08:13 christos Exp $ # $NetBSD: named.conf,v 1.4 2006/03/23 13:50:44 itojun Exp $
# boot file for secondary name server # boot file for secondary name server
# Note that there should be one primary entry for each SOA record. # Note that there should be one primary entry for each SOA record.
@ -6,6 +6,7 @@
options { options {
directory "/etc/namedb"; directory "/etc/namedb";
query-source address * port 53; query-source address * port 53;
allow-recursion { localhost; localnets; };
}; };
zone "." { zone "." {