[afnog] Looking behind the smoke screen of the Internet and Internationa Infrastructure: DNS recursive attacks, spamvrtised domains, phishing, botnet C&C's and you

Rob Thomas robt at cymru.com
Fri Feb 17 17:34:48 EAT 2006


] 'scuse me for being blond here, but if your resolvers are not recursive,
] how do they resolve?

They don't, which solves one problem and creates one that is much
worse.  :)

The correct statement is that DNS recursion is necessary, and should
be enabled only for "trusted" networks.

-- 
Rob Thomas
Team Cymru
http://www.cymru.com/
ASSERT(coffee != empty);




More information about the afnog mailing list