From: Ondřej Surý <ondrej@isc.org>
Date: Thu, 29 Jan 2026 03:29:45 +0000 (+0100)
Subject: chg: usr: Enable minimal ANY answers by default
X-Git-Tag: v9.21.18~4
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=40bffcc8a6f6d16ea088017964499a54b91d2f70;p=thirdparty%2Fbind9.git

chg: usr: Enable minimal ANY answers by default

ANY queries are widely abused by attackers doing reflection attacks as
they return the largest answers.  Enable minimal ANY answers by default
to reduce the attack surface of the DNS servers.

Closes #5723

Merge branch '5723-change-minimal_any-default-to-yes' into 'main'

See merge request isc-projects/bind9!11505
---

40bffcc8a6f6d16ea088017964499a54b91d2f70