Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Do most DNS Resolver servers enable cache pollution protection (by default, or during set up), like the setting Microsoft DNS Server has?

"Secure Cache Against Pollution setting" After you enable this setting, the DNS server ignores DNS resource records that come from servers that are not authoritative for them. Although it can cause extra DNS queries, the security benefits far outweigh the cost of the extra queries, so enabling DNS cache pollution protection is highly recommended.

I am noticing very slow times with it on, and I am not sure what everyone else is doing about it!

share|improve this question

The newest versions of software generally have the option, but not enabled by default, everything else no.

I personally don't worry about DNS Cache Pollution, authority is easy to fake if your upstream dns server has been rooted. Cache Poisoning is hard to defend against, and is a large reason behind the push for DNSSEC.

share|improve this answer

Windows DNS does have this on by default.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.