nanog mailing list archives

Re: DNS cache poisoning attacks -- are they real?


From: Suresh Ramasubramanian <ops.lists () gmail com>
Date: Mon, 28 Mar 2005 20:26:46 +0530


On Mon, 28 Mar 2005 16:40:22 +0100, Brad Knowles
<brad () stop mail-abuse org> wrote:
        If you want to use your own resolver remotely like this, I can't
really say too much about that.  However, in that case I would
encourage you to ensure that the server is closed to queries from
outside sources unless those sources are cryptographically
authenticated.

Not even mine as a matter of fact.  My DSL ISP's. :)


Current thread: