[rbldnsd] Associating TTL to some NXDOMAIN replies

John R Levine johnl at taugh.com
Mon Jan 27 22:05:28 MSK 2014


> It should be possible, as NXDOMAIN packets leave with their own
> AUTHORITY section containing the SOA so -in theory- each packet could
> actually leave with a different SOA and therefore a different TTL.
> That SOA is not going to be cached AFAICT and will only be used with
> regard to the TTL of NXDOMAIN for the requested RR.
> So it shouldn't collide with the "real SOA" of the zone either.

I see what you're getting at, but I wouldn't want to assume that DNS 
caches work the way that seems most obvious.  I'll see if BIND-users has 
anything interesting to say.

Regards,
John Levine, johnl at taugh.com, Taughannock Networks, Trumansburg NY
Please consider the environment before reading this e-mail.


More information about the rbldnsd mailing list