> On Thu, Jun 27, 2002 at 10:12:08AM +1000, Mark.Andrewsisc.org wrote:
> > Provided you are behind a nameserver you trust that reconstructs
> > the answer you should be fine.
>
> Thanks for this info, Mark.
>
> I guess that name server better be running on localhost, or else an
> agent may be able to spoof DNS messages.
>
> > BIND 9 reconstucts all answers (excluding forwarded UPDATES).
>
> cool
>
> > BIND 8 forwards some and reconstructs others.
>
> at random? :-)

        No. See ns_resp.c for details.

> Cheers,
> --
> Jacques A. Vidrine <nnectar.cc> http://www.nectar.cc/
> NTT/Verio SME . FreeBSD UNIX . Heimdal Kerberos
> jvidrineverio.net . nectarFreeBSD.org . nectarkth.se

--
Mark Andrews, Internet Software Consortium
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: Mark.Andrewsisc.org
To Unsubscribe: send mail to majordomoFreeBSD.org
with "unsubscribe freebsd-security" in the body of the message

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]