[Gllug] re: BIND patch for Versign 'site-finder' problem

[t.clarke]

Thanks for the various posts explaining what the BIND patch does or at least
is supposed to do !

It seems the only drawback with this is that all Verisign have to do is to
'delegate' all non-existent domains to a second-level nameserver of their
choice and the patch no longer works,  eg
users nameserver queries for www.non-existent.com
.com nameserver returns namesever address for non-existent.com as
  non-domain-server.com
user nameserver re-queries non-domain-server.com
non-domain-server.com returns site-finder IP address etc

Presumably if they are sufficuemtly bloody-minded they will do just that !

Tim

-- 
Gllug mailing list  -  Gllug at linux.co.uk
http://list.ftech.net/mailman/listinfo/gllug