Re: [dns-operations] Best practices for Linux/UNIX stub resolver

2014-04-30 Thread Joe Greco
7;s named. If you want to compare that to Windows, please note that it's not too horribly difficult to break its nameservice, which may be more fragile than the typical Unbound or BIND installation. ... JG -- Joe Greco - sol.net Network Services - Milwaukee, WI - http://www.sol.net "We c

Re: [dns-operations] resolvers considered harmful

2014-10-22 Thread Joe Greco
t of BusyBox or whatever that need to be able to do hostname lookups. So, great, we do what, we put BIND 9 on them? And then never patch them once the product warranty has expired? That's going to end well. ... JG -- Joe Greco - sol.net Network Services - Milwaukee, WI - http://www.sol.net

Re: [dns-operations] resolvers considered harmful

2014-10-23 Thread Joe Greco
> Let me try to take care of both of these related points together: > > Joe Greco : > > Then we merely move on to the issue of cache poisoning individual > > clients. > > > > Assuming that the CPE is a NAT (effectively firewalling clients from > > poison

Re: [dns-operations] query source port 53,

2012-06-12 Thread Joe Greco
Sure you can. And sometimes do. That's what the whole privileged port thing is about, right? Sometimes it is desirable to constrain the possibilities for various reasons. ... JG -- Joe Greco - sol.net Network Services - Milwaukee, WI - http://www.sol.net "We call it the 'one bite

Re: [dns-operations] query source port 53,

2012-06-12 Thread Joe Greco
> > > In message <201206122327.q5cnru5s077...@aurora.sol.net>, Joe Greco writes: > > > In message , > > > Ton > > y Fi > > > nch writes: > > > > Mark Andrews wrote: > > > > > > > > > > Perhaps beca

Re: [dns-operations] Querying version.bind illegal?

2013-05-23 Thread Joe Greco
awful abuse of broad and vague computer crime laws that we've been seeing more of lately. ... JG -- Joe Greco - sol.net Network Services - Milwaukee, WI - http://www.sol.net "We call it the 'one bite at the apple' rule. Give me one chance [and] then I won't contact you aga

Re: [dns-operations] Querying version.bind illegal?

2013-05-23 Thread Joe Greco
> On May 23, 2013, at 10:48 AM, Joe Greco wrote: > > > That's a geek technical argument. Real world is different. > > > > http://www.circleid.com/posts/811611_david_ritz_court_spam/ > > This is a civil case not criminal, these are also different beast