DNS Denial Of Service

[Markus Stumpf]

On Tue, Jun 22, 1999 at 02:41:43PM -0400, Davidson, Paul wrote:
> Does any version of BIND currently have protection against a DNS denial of
> Service attack. I understand this is accomplished by  sending invalid data
> to a DNS server ???????

If you refer to spoofing names and adresses and poisoning the named
cache there is a new method for assigning ids to query packets in 8.2.x
which should solve the problem.

	\Maex

-- 
SpaceNet GmbH             |   http://www.Space.Net/   | Yeah, yo mama dresses
Research & Development    | mailto:maex-sig at Space.Net | you funny and you need
Joseph-Dollinger-Bogen 14 |  Tel: +49 (89) 32356-0    | a mouse to delete files
D-80807 Muenchen          |  Fax: +49 (89) 32356-299  |