Date: Wed, 26 Jun 2002 22:16:14 -0500 From: "Jacques A. Vidrine" <nectar@FreeBSD.ORG> To: Mark.Andrews@isc.org Cc: security@FreeBSD.ORG Subject: BIND and reconstruction of DNS messages (was Re: FreeBSD Security Advisory FreeBSD-SA-02:28.resolv) Message-ID: <20020627031614.GE46205@madman.nectar.cc> In-Reply-To: <200206270012.g5R0C8m0029482@drugs.dv.isc.org> References: <4.3.2.7.2.20020626133115.022a0d30@localhost> <200206270012.g5R0C8m0029482@drugs.dv.isc.org>
next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, Jun 27, 2002 at 10:12:08AM +1000, Mark.Andrews@isc.org wrote: > Provided you are behind a nameserver you trust that reconstructs > the answer you should be fine. Thanks for this info, Mark. I guess that name server better be running on localhost, or else an agent may be able to spoof DNS messages. > BIND 9 reconstucts all answers (excluding forwarded UPDATES). cool > BIND 8 forwards some and reconstructs others. at random? :-) Cheers, -- Jacques A. Vidrine <n@nectar.cc> http://www.nectar.cc/ NTT/Verio SME . FreeBSD UNIX . Heimdal Kerberos jvidrine@verio.net . nectar@FreeBSD.org . nectar@kth.se To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20020627031614.GE46205>