Patching BIND (Re: What *are* they smoking?)
E.B. Dreger
eddy+public+spam at noc.everquick.net
Tue Sep 16 05:32:50 UTC 2003
PWG> Date: Mon, 15 Sep 2003 19:40:33 -0400
PWG> From: Patrick W. Gilmore
PWG> Anyone wanna patch BIND such that replies of that IP addy
PWG> are replaced with NXDOMAIN? That solves the web site and
PWG> the spam problem, and all others, all at once.
I'd actually go for keeping the A RR for '*.net.' and '*.com.' in
an authoritative NS's cache. If any other A RR matches the
cached IP address(es), nuke the RRSet and replace with NXDOMAIN.
Until then, I guess it's time to null route and check for
circumvention. Is AS30060 used for anything legitimate?
Eddy
--
Brotsman & Dreger, Inc. - EverQuick Internet Division
Bandwidth, consulting, e-commerce, hosting, and network building
Phone: +1 785 865 5885 Lawrence and [inter]national
Phone: +1 316 794 8922 Wichita
_________________________________________________________________
DO NOT send mail to the following addresses :
blacklist at brics.com -or- alfra at intc.net -or- curbjmp at intc.net
Sending mail to spambait addresses is a great way to get blocked.
More information about the NANOG
mailing list