Why forwarding is a Bad Thing

Brad Knowles brad.knowles at skynet.be
Thu Mar 22 18:31:49 UTC 2001


At 3:07 PM +0000 3/22/01, Jim Reid wrote:

>  Now sometimes forwarding is the only option: say because of firewall
>  access policies or dial-up internet connectivity or (shudder!) NAT. In
>  these cases, I would grudgingly use forwarding if someone put a gun to
>  my head. Other than that, I'd avoid using or setting up forwarding
>  name servers if at all possible.

	One further question I forgot to ask -- would you place the use 
of forwarding in the same category as using wildcard records, 
especially wildcard MX records?

	In other words, no one should ever publicly advocate their use, 
and all public mention of them should discourage everyone from using 
them, but sufficiently knowledge-able people (who know who they are 
;-) will know when they can violate this rule?

--
Brad Knowles, <brad.knowles at skynet.be>

/*     efdtt.c     Author:  Charles M. Hannum <root at ihack.net>             */
/*                                                                         */
/*     Thanks to Phil Carmody <fatphil at asdf.org> for additional tweaks.    */
/*                                                                         */
/*     Length:  434 bytes (excluding unnecessary newlines)                 */
/*                                                                         */
/*     Usage is:  cat title-key scrambled.vob | efdtt >clear.vob           */
/*     where title-key = "153 2 8 105 225" or other similar 5-byte key     */

#define m(i)(x[i]^s[i+84])<<
unsigned char x[5],y,s[2048];main(n){for(read(0,x,5);read(0,s,n=2048);write(1,s
,n))if(s[y=s[13]%8+20]/16%4==1){int i=m(1)17^256+m(0)8,k=m(2)0,j=m(4)17^m(3)9^k
*2-k%8^8,a=0,c=26;for(s[y]-=16;--c;j*=2)a=a*2^i&1,i=i/2^j&1<<24;for(j=127;++j<n
;c=c>y)c+=y=i^i/8^i>>4^i>>12,i=i>>8^y<<17,a^=a>>14,y=a^a*8^a<<6,a=a>>8^y<<9,k=s
[j],k="7Wo~'G_\216"[k&7]+2^"cr3sfw6v;*k+>/n."[k>>4]*2^k*257/8,s[j]=k^(k&k*2&34)
*6^c+~y;}}


More information about the bind-users mailing list