diff options
| author |   florian <florian@openbsd.org> | 2018-05-18 05:12:46 +0000 |
|---|---|---|
| committer | florian <florian@openbsd.org> | 2018-05-18 05:12:46 +0000 |
| commit | eaa9872a70b02e14ea598db3f6353607673eb086 (patch) | |
| tree | 821f97db53449396565a01b7f809c8e33078886c /usr.sbin/nsd | |
| parent | Use passthrough IO rather than MFA for management commands. (diff) | |
| download | wireguard-openbsd-eaa9872a70b02e14ea598db3f6353607673eb086.tar.xz wireguard-openbsd-eaa9872a70b02e14ea598db3f6353607673eb086.zip | |
Turn on minimal-reponses and refuse-any per default.
OK sthen
Diffstat (limited to 'usr.sbin/nsd')
| -rw-r--r-- | usr.sbin/nsd/nsd.conf.5.in | 4 | ||||
| -rw-r--r-- | usr.sbin/nsd/options.c | 4 |
2 files changed, 4 insertions, 4 deletions
diff --git a/usr.sbin/nsd/nsd.conf.5.in b/usr.sbin/nsd/nsd.conf.5.in index 78215a9c891..33044879f08 100644 --- a/usr.sbin/nsd/nsd.conf.5.in +++ b/usr.sbin/nsd/nsd.conf.5.in @@ -375,14 +375,14 @@ Extra data is only added for referrals, when it is really necessary. This is different from the \-\-enable-minimal-responses configure time option, that reduces packets, but exactly to the fragmentation length, the nsd.conf option reduces packets as small as possible. -The default is no. +The default is yes. .TP .B refuse\-any:\fR <yes or no> Refuse queries of type ANY. This is useful to stop query floods trying to get large responses. Note that rrl ratelimiting also has type ANY as a ratelimiting type. It sends truncation in response to UDP type ANY queries, and it allows TCP type ANY queries like normal. -The default is no. +The default is yes. .TP .B zonefiles\-check:\fR <yes or no> Make NSD check the mtime of zone files on start and sighup. If you diff --git a/usr.sbin/nsd/options.c b/usr.sbin/nsd/options.c index d0bed6a9b94..a74218b345c 100644 --- a/usr.sbin/nsd/options.c +++ b/usr.sbin/nsd/options.c @@ -64,8 +64,8 @@ nsd_options_create(region_type* region) opt->logfile = 0; opt->log_time_ascii = 1; opt->round_robin = 0; /* also packet.h::round_robin */ - opt->minimal_responses = 0; /* also packet.h::minimal_responses */ - opt->refuse_any = 0; + opt->minimal_responses = 1; /* also packet.h::minimal_responses */ + opt->refuse_any = 1; opt->server_count = 1; opt->tcp_count = 100; opt->tcp_query_count = 0; |