Redirecting Unresolved Domains to a Host
Alan Clegg
Alan_Clegg at isc.org
Mon Aug 18 17:39:23 UTC 2008
chrish wrote:
>> meanwhile ISC will continue to push for DNSSEC in the hope that this kind
>> of thing simply cannot be done at all in the way it's often done today
>> (using faked NXDOMAIN responses from full resolvers toward stub
>> resolvers.)
>
> Is there any way to insure that this sort of thing will never be possible?
Yes. As Paul said, deploy DNSSEC.
AlanC
More information about the bind-users
mailing list