ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity

Adjust default value of "max-recursion-queries"

Browse Source 
Since the queries sent towards root and TLD servers are now included in
the count (as a result of the fix for CVE-2020-8616),
"max-recursion-queries" has a higher chance of being exceeded by
non-attack queries.  Increase its default value from 75 to 100.

(cherry picked from commit ab0bf49203)
This commit is contained in:
Mark Andrews
2020-12-01 22:13:05 +00:00
parent 53203b8f04
commit d09991e4e9
6 changed files with 16 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
bin/named/config.c
+1 -1
View File
@@ -185,7 +185,7 @@ options {\n\
max-clients-per-query 100;\n\
max-ncache-ttl 10800; /* 3 hours */\n\
max-recursion-depth 7;\n\
max-recursion-queries 75;\n\
max-recursion-queries 100;\n\
message-compression yes;\n\
# min-roots <obsolete>;\n\
minimal-any false;\n\