Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 11 Aug 1999 21:50:20 +0200 (CEST)
From:      =?ISO-8859-1?Q?Robert_Martin-Leg=E8ne?= <robert-spam99@nisse.dk>
To:        Michael Butler <butlermd@tgn.net>
Cc:        freebsd-isp@FreeBSD.ORG
Subject:   Re: www.tzo.com hijacks  DNS??
Message-ID:  <Pine.BSF.4.10.9908112134520.7190-100000@irc.ircnet.dk>
In-Reply-To: <37b5b9bc.43485477@mail.tgn.net>

next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, 11 Aug 1999, Michael Butler wrote:

> This may be old stuff but is anyone getting dns mods fromtzo.com
> hijacking ip addresses to their domains?
>=20
> What do we do about it?
>=20
> see www.tzo.com
>=20
> They're about to be cut off at the FW

If you run BIND you probably don't need to do a lot, since it by default
rejects them.

DK Hostmaster got a lot of these and I wrote a layer 5 (I believe it's
layer 5) divert-thingie that drops any UDP DNS packet crossing your
FreeBSD with the opcode of UPDATE (=3D5).

If anyones interested in buying a copy, please contact me (expect 2 week
response as I'm going travelling in a few days)

-- Robert Martin-Leg=E8ne



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.10.9908112134520.7190-100000>