Re: djbdns/dnscache poisoning weakness

Jeremy Kister <[email protected]>
Newsgroups gmane.network.djbdns
Message-ID <[email protected]>
On 2/9/2009 2:41 PM, Kevin Day wrote:
> Specifically, two patches were developed by Jeff King ([email protected])  
> that close the poisoning attack weaknesses discussed here. The first  
[...]
 > The patches are available individually or as a pre-patched djbdns
 > distribution at http://www.your.org/dnscache

Hey Jeff,

Do you recommend deploying these two patches in production environments 
that serve a few million rather-untrusted hosts?

Do we have any measurement/estimate of CPU overhead that qmerge takes ?

Do we have an average percent cache is spent on the SOAs ?


-- 

Jeremy Kister
http://jeremy.kister.net./
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.