Re: ANY queries to tinydns

Name some fw vendors and versions.  Some shame should be put on them.

		--Dean

On Wed, 31 Mar 2010, Matthew Dempsky wrote:

> On Wed, Mar 31, 2010 at 1:34 PM, Dean Anderson <[email protected]> wrote:
> > I can't imagine why firewall should have problems with
> > such a packet, but that's on the firewall.
> 
> Because most DNS software sets the numrecords fields based on the
> number of records included in the response, so sloppy firewall
> builders assume this is the correct/only behavior and add paranoid
> rules to their firewalls to reject other responses as malicious
> attempts to exploit buggy client software.
> 
> 

-- 
Av8 Internet   Prepared to pay a premium for better service?
www.av8.net         faster, more reliable, better service
617 256 5494