At 08:06 21.08.2004 -0600, you wrote:
That"s why the new method of using DNS
to cache the version number will be a much better solution and I think
it will allow more frequent checks without burdening the mirrors and
shifting the load to the DNS infrastructure.

I am not a DNS expert by any means and I may be way off in left field here but you may want consider that there are many a server behind gateway appliances or proxies that cache DNS for a fixed length of time. I really have no idea if there are devices that do not obey refresh values but the bigger question is: do you?

There are....

Without knowing for sure how these devices handle the DNS
refresh I would be cautious. It may not be an issue if the server were
configured to use a real a DNS server to obtain records, but I would think
many internal servers are configured to obtain records from gateway
proxies/routers/appliances and if configured to do so, and these devices
do not obey rules, the records they see may be 12 hours old or older.

Just something to consider. I could be wrong.

You can choose the DNS server you want to use for your virus scanner, can't you?

Yes

DNS is definitely the method of choice to distribute such information. It has been designed for fast distribution of small information chunks, and TTL has been there forever, so any implementation not respecting these values should be scheduled for deletion anyway.

I have no evidence that this problem actually exists so the point may be moot, but if there are gateway devices that ignore TTL in favor of their own proprietory cache mechanism then at least the user should be informed of this possibility and asked to reconfigure their resolver to point to a real DNS server. Questions are: Is this in fact a potential issue? If it is, how will the end user be notified that they may need to reconfigure their resolver?

_________________________________________________________________
On the road to retirement? Check out MSN Life Events for advice on how to get there! http://lifeevents.msn.com/category.aspx?cid=Retirement




-------------------------------------------------------
SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media
100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33
Save 50% off Retail on Ink & Toner - Free Shipping and Free Gift.
http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285
_______________________________________________
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users

Reply via email to