From owner-freebsd-security Sun Jun 2 12:19:34 2002 Delivered-To: freebsd-security@freebsd.org Received: from rwcrmhc53.attbi.com (rwcrmhc53.attbi.com [204.127.198.39]) by hub.freebsd.org (Postfix) with ESMTP id 1AB3237B407 for ; Sun, 2 Jun 2002 12:19:28 -0700 (PDT) Received: from blossom.cjclark.org ([12.234.91.48]) by rwcrmhc53.attbi.com (InterMail vM.4.01.03.27 201-229-121-127-20010626) with ESMTP id <20020602191927.FKUS11659.rwcrmhc53.attbi.com@blossom.cjclark.org>; Sun, 2 Jun 2002 19:19:27 +0000 Received: (from cjc@localhost) by blossom.cjclark.org (8.11.6/8.11.6) id g52JJMY33545; Sun, 2 Jun 2002 12:19:22 -0700 (PDT) (envelope-from crist.clark@attbi.com) X-Authentication-Warning: blossom.cjclark.org: cjc set sender to crist.clark@attbi.com using -f Date: Sun, 2 Jun 2002 12:19:22 -0700 From: "Crist J. Clark" To: Hajimu UMEMOTO Cc: Drew Tomlinson , security@FreeBSD.ORG Subject: Re: Security Messages re: hosts.allow? Message-ID: <20020602121922.H20911@blossom.cjclark.org> Reply-To: cjclark@alum.mit.edu References: <007e01c20a47$7fabb370$1b01a8c0@TAGALONG> <20020602113409.F20911@blossom.cjclark.org> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: ; from ume@mahoroba.org on Mon, Jun 03, 2002 at 03:50:33AM +0900 X-URL: http://people.freebsd.org/~cjc/ Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org On Mon, Jun 03, 2002 at 03:50:33AM +0900, Hajimu UMEMOTO wrote: > Hi, > > >>>>> On Sun, 2 Jun 2002 11:34:09 -0700 > >>>>> "Crist J. Clark" said: > > crist.clark> server1.camelweb.com.tw. 23h59m43s IN CNAME dns.camelweb.com.tw. > crist.clark> server1.camelweb.com.tw. 23h59m43s IN A 210.59.224.44 > crist.clark> dns.camelweb.com.tw. 22h47m42s IN A 210.59.224.42 > > crist.clark> 42.224.59.210.in-addr.arpa. 9h1m47s IN PTR server1.camelweb.com.tw. > > crist.clark> But from the looks of it, these DNS entries themselves do not look > crist.clark> malicious. > > No, CNAME RR cannot co-exist with A RR. I didn't say it wasn't broken DNS. I was saying that it does not look like someone is trying to pretend they are someone they are not (which is the reason tcpwrapper produces that kind of warning). -- Crist J. Clark | cjclark@alum.mit.edu | cjclark@jhu.edu http://people.freebsd.org/~cjc/ | cjc@freebsd.org To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message