> If someone controlled the reverse mapping for a range of IP addresses and
knew
> your domain name, he could make one of his addresses reverse map to a name
in
> your domain and gain access you don't want him to have.

You can compare the forwards and reverse nameservice to make sure that they
are both the same IP/hostname.  Ie: the name returned from the reverse
nameservice lookup must have 1 A record that maps to the incoming IP address
(this is equivalent to tcpserver's paranoid mode).

Evan

Reply via email to