Greetings,
This is from the pdns documentation:
"""
out-of-zone-additional-processing |
--out-of-zone-additional-processing=yes |
--out-of-zone-additional-processing=no
Do out of zone additional processing. This means that if a malicious
user adds a '.com' zone to your server, it is not used for other
domains and will not contaminate answers. Do not enable this setting
if you run a public DNS service with untrusted users. Off by default.
"""
My question is this. The description indicates that setting this to yes
would prevent malicious use of your public authoritative DNS server with
untrusted users (such as in our hosting company), but then goes on to
say that you shouldn't enable this setting if you run a public DNS
service with untrusted users? Could someone please clarify this?
Many thanks. Tom.
_______________________________________________
Pdns-users mailing list
Pdns-users@mailman.powerdns.com
http://mailman.powerdns.com/mailman/listinfo/pdns-users
