North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: Is my BIND Server's Cache Poisioned ?

  • From: Joe Shen
  • Date: Thu Jun 30 04:17:43 2005
  • Domainkey-signature: a=rsa-sha1; q=dns; c=nofws; s=s1024;; h=Message-ID:Received:Date:From:Subject:To:Cc:In-Reply-To:MIME-Version:Content-Type:Content-Transfer-Encoding; b=Si8v2749QxBz6VNfCvR1zhxl4viqnMGG7cBzxMJg72JwZ4k7RJPwj/argfuYrpbVkD2EGYnQyqhx8fB1rl8VyJLHeRQtENajAZuCWQ0OWPrgJyp/3DotF3UFsfTXH+/WVUpzf48nb/qR13Wh9Phk94Dj6I9jtYhx+CE86SlPEYA= ;


thanks for the help.

> 	Because IPv6 aware nameservers make AAAA queries
> for the
> 	IPv6 addresses of the nameservers and as a result
> see the
> 	NXDOMAIN / CNAME.  The IPv4 only nameservers don't
> make
> 	these queries, as a matter of practice, and only
> see the
> 	problems if some client of the nameserver makes a
> query
> 	for some records with the same name as that of the
> nameservers.

I've run BIND9 cache server with -4 option. Is there
any way to make BIND9 fault tolerant?


Meet your soulmate!
Yahoo! Asia presents Meetic - where millions of singles gather