DNS flaw reanimates slain evil sites as ghost domains


Not entirely true...

"By only restricting recursive queries to authorised clients with an ACL [Access Control List] (that is, not running an open recursive name server), you'd prevent malicious folks on the internet from refreshing their delegation."

With all the zombies out there malicious people could keep DNS alive on networks with infected computers nearly indefinitely...

Yet more reasons not to use nameservers that are shared with other people you don't know or trust


Back to the forum


Biting the hand that feeds IT © 1998–2017