North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: large organization nameservers sending icmp packets to dns servers.

  • From: Doug Barton
  • Date: Thu Aug 09 18:54:31 2007


On Wed, 8 Aug 2007, David Conrad wrote:


How many bytes of shell code can you stuff in a 512 byte DNS UDP packet?

How many bytes of shell code can you stuff into a 4096 byte EDNS0 UDP packet? :)


P.S. I still think blocking TCP/53 is stupid.

Agreed.


--

If you're never wrong, you're not trying hard enough