[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Debian + Verisign's .com/.net hijack



Arthur de Jong wrote:
> This will only work for a little while as a colleague of mine noted. This
> will block
>   *   IN   A   64.94.110.11
> but not
>   *   IN   NS  64.94.110.11
> which is a valid delegation. The 64.94.110.11 nameserver should then only
> return 64.94.110.11 for all requests for A records.

Paul Vixie addressed just this possibility in
<20030917051345.2DC911396E@sa.vix.com> on the NANOG list. You can mark
such a name server as "bogus". Assuming that IP is routable at all; I have
not seen a packet from 64.94.110.11 in over 24 hours.

-- 
see shy jo

Attachment: pgpqKtQHgj9WW.pgp
Description: PGP signature


Reply to: