[SLL] who is randomizing DNS source ports? deploying DNSSEC?

Brian Lane bcl at brianlane.com
Mon Jul 28 22:18:24 PDT 2008


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Jeremy C. Reed wrote:
> Just an informal survey ...
> 
> Any of you choosing not to randomize DNS source ports for your caching 
> recursive servers? (Why?)
> 
> Using iptables or other PAT to randomize for you?
> 
> Already used a DNS server that did it?
> 
> Don't care?
> 
> Anyone deployed DNSSEC? Or plan to within next 30 days? (Let me know if 
> you need help.)
> 

I use djbdns

:)

- --
- ---[Office 71.3F]--[Outside 60.7F]--[Server 102.2F]--[Coaster 66.3F]---
Software, Linux, Microcontrollers             http://www.brianlane.com
AIS Parser SDK                                http://www.aisparser.com

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (Darwin)
Comment: Remember Lexington Green!

iD8DBQFIjqgfIftj/pcSws0RAodcAJ46tXtFOr17Gl5X6eA7GrJJQbfUwwCghSL8
fRafMNwuuy9yZ3DbGfG3Hdw=
=BtX6
-----END PGP SIGNATURE-----


More information about the linux-list mailing list