RE: [cobalt-developers] publishing slave nameservers was RE: Denial-of-Service Vulnerabilityin ISC BIND 9

["Matthew Nuzum" <newz@xxxxxxxxxxxxx>]

> It means that YOUR primary and secondary nameservers will always
answer
> authoritatively for their own domains, but will only answer
> authoritatively for domains it looks up recursively if those domains
are
> NOT already in it's cache.
...
> 
> How were you telling the slaves they were authoritative, and how were
> you transferring zone-files to them?
> 
...
> Jeff

Ah... subtle but important.  I was not transferring the zone files.
Since the slaves could answer for the masters it appeared that all was
working fine.

I guess it's surprising that it worked at all.  But as far as we could
tell, most of the ISPs worked fine.

Matthew Nuzum
www.bearfruit.org
cobalt@xxxxxxxxxxxxx