root name server hijacked?

Paul Vixie vixie at as.vix.com
Wed Dec 18 00:00:38 UTC 2002


> > How do I bypass that DNS proxy?
> 
> Possibly there is a DNS server in the "free" world, that listens on another
> port. As i assume the DNS proxy filters all traffic on port 53 this could
> help.

f.6to4-servers.net has both an A and AAAA RR, and answers on both udp/53
and udp/42.  you should be able to use it to bypass proxies if your NAT
box is only intercepting udp/53.  you should also be able to use it to
fetch data from zones with only IPv4-reachable servers if you are an Ipv6-
only forwarder.  (BIND9 will have a "6to4-forwarders" directive to make
such a forwarder possible.)
-- 
Paul Vixie


More information about the bind-users mailing list