Re: 2 forwarded messages...DNSEXT discussion of Day and Kaminsky

Yes, I do know that qmerge doesn't make THAT change. My example was to
demonstrate that changes affect the attacks that are possible.  My 
example shows that a change can make one attack very hard, while 
simultaneously making another attack very easy.

		--Dean

On Wed, 18 Feb 2009, Matthew Dempsky wrote:

> On Wed, Feb 18, 2009 at 11:11 AM, Dean Anderson <[email protected]> wrote:
> > But if that port is known to be bound to UDP 53,
> 
> You understand that the qmerge patch doesn't make this change, right?
> It doesn't change dnscache to send multiple queries from the same
> source port.  It just changes dnscache to not send a query for a
> type/name if it already has an outstanding query for this same
> type/name.  Queries for type/names that don't match any existing
> outstanding queries still have random source addresses and txids
> exactly how dnscache already works.
> 
> 

-- 
Av8 Internet   Prepared to pay a premium for better service?
www.av8.net         faster, more reliable, better service
617 344 9000