how to get people to upgrade? (Re: The weak link? DNS)

Wed Mar 26 18:32:30 UTC 2003

On Wed, 26 Mar 2003 08:14:45 PST, william at elan.net  said:
> 
> What are you talking about, DNS check option will work great for BIND, 
> I mean if BIND can not get to the root server and thereafter to ISC, you 
> don't have to worry about it getting hacked, its probably not connected to 

Keep in mind that the *really* damaging security incidents tend to be the
ones with skilled and/or insider attackers.  And if you've scored some
secretary's PC inside the corporate net, a DNS server inside the net
(and unable to contact the outside world) makes a GREAT way to leverage
the foothold....
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 226 bytes
Desc: not available
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20030326/7374be83/attachment.sig>