This is a statement on DNS resolver usage in AOLserver. 1) AOLserver 3 and better are not normally configured to perform any hostname or address resolution.
2) The nsperm, nslog, and nscgi modules can be specifically configured to use DNS resolution but are not normally configured to do so. 3) AOLserver 2.3.3 and older *do* regularly perform DNS resolution, but this point is moot since the AOLserver team explicitly forbids the use of the 2.x releases anywhere for any reason. 4) Applications written for AOLserver can and often do use DNS resolution. Course of action: Patch your operating system. Calls in AOLserver and its Tcl interpreter to use DNS resolution will always use the system libraries and they're always dynamically-linked. Therefore as long as the operating system itself is patched then AOLserver applications are protected from problems in the DNS resolver code provided by the operating system. Regards, Kris -- Kriston Rehberg America Online, Inc.
