Yet another Quadruple DNS?
joelja at bogus.com
Thu Mar 29 18:27:09 UTC 2018
On 3/29/18 10:59 AM, Stephen Satchell wrote:
> In regards to: spoofing DNS to 18.104.22.168 et al
> On 03/29/2018 09:26 AM, Baldur Norddahl wrote:
>> Running your own resolver will not work.
> Why won't it work? I run a Linux box with BIND 9 set up as a
> recursive resolver. Are you saying that the rogues will also capture
> requests to the root DNS servers, as described in the hints file?
All destination port 53 udp packets.
More information about the NANOG