published by whitemice on Thu, 02/09/2017 - 06:46
As of BIND 9.9.0 bind is now compliant with RFC6303. RFC6303 addresses the issue that everywhere on the Internet private networks are leaking [People - you need egress firewalls..., egress firewalls, not just ingress]. Name servers receive many queries for addresses that are 'private' [see RFC1918].
