Even if you have a local caching DNS server pointing to root DNS
level always....

Aren't you still vulnerable because DNS doesn't do authentication?
(RSA keys and all that stuff)

Couln't I act like a root DNS server and send bogas traffic to your
PC causing all kinds of mischief??? How would you protect against
*that*?

Chris



On Fri, Feb 18, 2005 at 09:04:52AM -0800, John H. Robinson, IV wrote:
> [EMAIL PROTECTED] wrote:
> > This list has been very helpful.  I believe one of many
> > things I've learned is that a caching DNS server provides
> > a little more security than a foreign DNS server you don't
> > have control over.
> >
> > This got me thinking.... why not run a caching DNS server
> > on *ALL* your PCs then if this is true???
> >
> > Why couldn't you run a caching DNS server on that laptop
> > you travel with?? How about on that lone PC you have at home?
> > How about that PC at the office?  It seems almost every
> > PC...even a lone PC, can benefit from a caching DNS server right???
>
> Sure? Why not?
>
> In the home LAN, I'd designate one system to be the cache for the entire
> LAN. In one of those rare instances of ``taking one's own advice'' this
> is exactly what I do at home.
>
> When I had a working laptop, it did run its own caching nameserver.
>
> -john  ``SLB''
> --
> [email protected]
> http://www.kernel-panic.org/cgi-bin/mailman/listinfo/kplug-list
>

--
_______________________________________

Christian Seberino, Ph.D.
SPAWAR Systems Center San Diego
Code 2872
49258 Mills Street, Room 158
San Diego, CA 92152-5385
U.S.A.

Phone: (619) 553-9973
Fax  : (619) 553-6521
Email: [EMAIL PROTECTED]
_______________________________________
-- 
[email protected]
http://www.kernel-panic.org/cgi-bin/mailman/listinfo/kplug-list

Reply via email to