Re: ISC BIND Amplification Attack

[Geert Hendrickx <ghen%telenet.be@localhost>]

On Wed, Jan 28, 2009 at 01:10:50PM -0500, Brian A. Seklecki wrote:
> 
> 
> > In what way does BIND 9.5.x solve this issue?
> >
> 
> Several new (default) options allow you to deny queries from the cache for
> non-authoritative domains.
> 
> 
> 'additional-from-cache' and 'allow-query-cache' from what I'm told.
> 
> ~BAS


I thought additional-from-cache was available in (at least) BIND 9.3, and
allow-query-cache in BIND 9.4.  Not sure about the defaults though.

        Geert