Not able to resolve a domain

Ryan Novosielski novosirj at umdnj.edu
Fri Nov 18 16:46:40 UTC 2011


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

How does one get a current bogons list? I'm assuming that there are
entries that are generally recommended to be in there (and that they're
provided with BIND's source when installing).

On 11/18/2011 11:33 AM, Evan Hunt wrote:
>> 1. When was 1/8 allocated, recently? Maybe you need to update your
>>    bogon filter?
> 
> That's my guess.  1.0.0.0/8 was one of the last network blocks
> allocated--last April, IIRC--and prior to that time it was often
> filtered because it was commonly used in spoofing attacks.
> 
> In fact, the BIND 9 documentation contains a sample blackhole ACL
> which, until recently, specifically recommended filtering addresses
> in that block.  The advice is outdated but I think someone is still
> following it.

- -- 
- ---- _  _ _  _ ___  _  _  _
|Y#| |  | |\/| |  \ |\ |  | |Ryan Novosielski - Sr. Systems Programmer
|$&| |__| |  | |__/ | \| _| |novosirj at umdnj.edu - 973/972.0922 (2-0922)
\__/ Univ. of Med. and Dent.|IST/CST-Academic Svcs. - ADMC 450, Newark
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk7Gi+8ACgkQmb+gadEcsb7MxACfW/gPhip/wbyztsBFB5nJLwZs
okkAoJSQcjkEybXyd90BFjq8Aoa9HFmV
=gAZG
-----END PGP SIGNATURE-----
-------------- next part --------------
A non-text attachment was scrubbed...
Name: novosirj.vcf
Type: text/x-vcard
Size: 301 bytes
Desc: not available
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20111118/cc78f99c/attachment.vcf>


More information about the bind-users mailing list