OPT bug clarification please

[Mark_Andrews at isc.org]

> 
> In reviewing:
> 
> http://www.isc.org/products/BIND/bind-security.html and
> http://bvlive01.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=21469
> 
> I think I understand what's happening with the OPT bug, but I want to be
> sure. This bug affects a resolving name server when a client sends a query
> for something that generates an NXDOMAIN response (plus other nastiness in
> the OPT section), correct?
> 
> The thing I want to clarify is whether or not this bug can be triggered in
> a name server that is authoritative only, and whether or not "fetch-glue
> yes" will follow the same resolver path that triggers the bug.

	It affects recursive servers only.

> 
> Thanks,
> 
> Doug
> 
> -- 
>    "We have known freedom's price. We have shown freedom's power.
>       And in this great conflict, ...  we will see freedom's victory."
> 	- George W. Bush, President of the United States
>           State of the Union, January 28, 2002
> 
>          Do YOU Yahoo!?
> 
> 
> 
--
Mark Andrews, Internet Software Consortium
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: Mark.Andrews at isc.org