Verisign Countermeasures - BIND and djbdns patches

Adam Langley agl at imperialviolet.org
Tue Sep 16 15:04:07 UTC 2003


On Tue, Sep 16, 2003 at 04:03:08PM +0100, Adam Langley wrote:
I'm collecting countermeasures to the verisign wildcard DNS records
at http://www.imperialviolet.org/dnsfix.html. Currently there are
patches for BIND 9.2.2 and djbdns (not authored by myself) and a
Linux userland/netfilter program that rewrites DNS packets (which is).

If anyone has other patches/countermeasures I'm happy to maintain a list
of links at the above URL.

-- 
Adam Langley                                      agl at imperialviolet.org
http://www.imperialviolet.org                       (+44) (0)7906 332512
PGP: 9113   256A   CC0F   71A6   4C84   5087   CDA5   52DF   2CB6   3D60




More information about the NANOG mailing list