Re: djbdns/dnscache poisoning weakness
Matthew Dempsky <[email protected]>
| Newsgroups | gmane.network.djbdns |
|---|---|
| Message-ID | <[email protected]> |
On Mon, Feb 9, 2009 at 11:41 AM, Kevin Day <[email protected]> wrote: > 1) Dnscache treats "SOA" requests as uncacheable. It's worth noting that dnscache from djbdns-1.05 also does not cache negative CNAME responses. E.g., it will always forward CNAME queries for "google.com" because that name does not have a CNAME record. Jonathan de Boyne Pollard pointed this out at http://homepages.tesco.net/J.deBoynePollard/FGA/djbdns-problems.html#dnscache-cname-handling.