From: Mark Andrews Date: Tue, 29 May 2007 23:12:42 +0000 (+0000) Subject: more changes from Jeremy X-Git-Tag: v9.5.0a6~47 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=4d2a6960a789ec896a3a0a672e7ae440fb11f4d2;p=thirdparty%2Fbind9.git more changes from Jeremy --- diff --git a/doc/arm/Bv9ARM-book.xml b/doc/arm/Bv9ARM-book.xml index 95f89b726ee..e8223c28483 100644 --- a/doc/arm/Bv9ARM-book.xml +++ b/doc/arm/Bv9ARM-book.xml @@ -18,7 +18,7 @@ - PERFORMANCE OF THIS SOFTWARE. --> - + BIND 9 Administrator Reference Manual @@ -600,7 +600,7 @@ traffic. Additionally, if additional section caching () is enabled, - the max-acache-size can be used to + the max-acache-size option can be used to limit the amount of memory used by the mechanism. It is still good practice to have enough memory to load @@ -4283,26 +4283,27 @@ category notify { null; }; DNS due to timeouts. This is often due to the remote servers not being RFC 1034 compliant (not always returning FORMERR or similar to - EDNS queries and other extension to the DNS - when they are not understood). i.e. this is + EDNS queries and other extensions to the DNS + when they are not understood). In other words, this is targeted at servers that fail to respond to DNS queries that they don't understand. - Note: the log message can be also due to + Note: the log message can also be due to packet loss. Before reporting servers for - non RFC 1034 compliance they should be re-tested - to determine the nature of of the non-compliance. - This testing should prevent / reduce the - number of false positive reports. + non-RFC 1034 compliance they should be re-tested + to determine the nature of the non-compliance. + This testing should prevent or reduce the + number of false-positive reports. Note: eventually named will have to stop treating such timeouts as due to RFC 1034 non compliance and start treating it as plain - packet loss as falsely classifying packet + packet loss. Falsely classifying packet loss as due to RFC 1034 non compliance impacts - on DNSSEC validation. + on DNSSEC validation which requires EDNS for + the DNSSEC records to be returned.