OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Mark.Andrewsisc.org
Date: Wed Jun 26 2002 - 22:35:47 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    > On Thu, Jun 27, 2002 at 10:12:08AM +1000, Mark.Andrewsisc.org wrote:
    > > Provided you are behind a nameserver you trust that reconstructs
    > > the answer you should be fine.
    >
    > Thanks for this info, Mark.
    >
    > I guess that name server better be running on localhost, or else an
    > agent may be able to spoof DNS messages.
    >
    > > BIND 9 reconstucts all answers (excluding forwarded UPDATES).
    >
    > cool
    >
    > > BIND 8 forwards some and reconstructs others.
    >
    > at random? :-)

            No. See ns_resp.c for details.

    > Cheers,
    > --
    > Jacques A. Vidrine <nnectar.cc> http://www.nectar.cc/
    > NTT/Verio SME . FreeBSD UNIX . Heimdal Kerberos
    > jvidrineverio.net . nectarFreeBSD.org . nectarkth.se

    --
    Mark Andrews, Internet Software Consortium
    1 Seymour St., Dundas Valley, NSW 2117, Australia
    PHONE: +61 2 9871 4742                 INTERNET: Mark.Andrewsisc.org
    

    To Unsubscribe: send mail to majordomoFreeBSD.org with "unsubscribe freebsd-security" in the body of the message