hi,
here is a quick and dirty hack for bind8
written by an anger guy (as we all are against verisgin)
http://achurch.org/bind-verisign-patch.html

here for dnscache
http://tinydns.org/djbdns-1.05-ignoreip.patch

of course, this has already been slashdot'ed.

here is another url:
http://www.imperialviolet.org/dnsfix.html

from the link :
   "You might want to let folks know that ISC is working on this issue
   now, and they will have a more general solution to the problem."


i can let you know that, for FreeBSD we clearly want
to filter this even for the local resolver in the source base.
we just wait for isc patches that should be ready
for today or just later.


cheers.

julien mabillard.

-- 
Key fingerprint = C549 46E1 1B75 116E 3321  BC0A E502 9457 319E B340
RFC822: [EMAIL PROTECTED] || [EMAIL PROTECTED] << www.NetBSD.org
----------------------------------------------
[EMAIL PROTECTED] Maillist-Archive:
http://www.mail-archive.com/swinog%40swinog.ch/

Reply via email to