3 ms·
But how long do you block/cache responses for? Many web pages run for days. As evidence: my 300 open tabs.
by angry_octet 8y ago
But how long do you block/cache responses for? Many web pages run for days. As evidence: my 300 open tabs.
- vbezhenar 8y ago--stop-dns-rebind Reject (and log) addresses from upstream nameservers which are in the private IP ranges. This blocks an attack where a browser behind a firewall is used to probe machines on the local network. There's no TTL, it just blocks any responses with private IP. Might break some software, because that's a legitimate DNS use.
- amaccuish 8y agoCorrect. For my internal DNS, I've added the option on the upstream outbound cache, so clients still can resolve the internal dns space.