[GH-ISSUE #383] Feature request: instead of returning NXDOMAIN better drop requests for unknown records #215

New issue

Open

opened 2026-03-13 16:10:20 +03:00 by kerem · 0 comments

kerem commented

2026-03-13 16:10:20 +03:00

Owner

Originally created by @pmhausen on GitHub (Jun 4, 2025).
Original GitHub issue: https://github.com/acme-dns/acme-dns/issues/383

Hi!

Since Letsencrypt officially states that you cannot limit your DNS server to certain client IP addresses by the means of a packet filter, I see a lot of requests by port scanners which are dutifully answered with NXDOMAIN.

I'd like a configurable option to drop the requests, i.e. not answer at all for anything unknown instead.

Kind regards,
Patrick

Originally created by @pmhausen on GitHub (Jun 4, 2025). Original GitHub issue: https://github.com/acme-dns/acme-dns/issues/383 Hi! Since Letsencrypt officially states that you cannot limit your DNS server to certain client IP addresses by the means of a packet filter, I see a lot of requests by port scanners which are dutifully answered with NXDOMAIN. I'd like a configurable option to drop the requests, i.e. not answer at all for anything unknown instead. Kind regards, Patrick