OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Jacques A. Vidrine (nectar_at_FreeBSD.org)
Date: Tue Nov 12 2002 - 17:47:06 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    On Wed, Nov 13, 2002 at 10:41:15AM +1100, Michael Carew wrote:
    > One thing that the advisory seems to leave out, is limiting recursion,
    > rather than disabling.

    It leaves it out because it doesn't help much. Your name server will
    still query other name servers, and those other name servers (or
    someone spoofing them, maybe) can send malicious replies that your
    name server will process.

    Cheers, 

    -- 
Jacques A. Vidrine <nectarcelabo.org>          http://www.celabo.org/
NTT/Verio SME          .     FreeBSD UNIX     .       Heimdal Kerberos
jvidrineverio.net     .  nectarFreeBSD.org  .          nectarkth.se

    To Unsubscribe: send mail to majordomoFreeBSD.org
with "unsubscribe freebsd-security" in the body of the message