[Gllug] re: BIND patch for Versign 'site-finder' problem
t.clarke
tim at seacon.co.uk
Mon Sep 22 11:26:43 UTC 2003
Thanks for the various posts explaining what the BIND patch does or at least
is supposed to do !
It seems the only drawback with this is that all Verisign have to do is to
'delegate' all non-existent domains to a second-level nameserver of their
choice and the patch no longer works, eg
users nameserver queries for www.non-existent.com
.com nameserver returns namesever address for non-existent.com as
non-domain-server.com
user nameserver re-queries non-domain-server.com
non-domain-server.com returns site-finder IP address etc
Presumably if they are sufficuemtly bloody-minded they will do just that !
Tim
--
Gllug mailing list - Gllug at linux.co.uk
http://list.ftech.net/mailman/listinfo/gllug
More information about the GLLUG
mailing list