Home » Mailing list archives » openbsd-misc » 2008 » July » 10

Re: Actual BIND error - Patching OpenBSD 4.3 named ?

Previous message: [thread] [date] [author]
Next message: [thread] [date] [author]
[view in full thread]
From: Stuart Henderson <stu@...>
To: <misc@...>
Subject: Re: Actual BIND error - Patching OpenBSD 4.3 named ?
Date: Thursday, July 10, 2008 - 10:28 am

On 2008-07-09, mark reardon  wrote:


right, unbound already randomises the source port (arc4random

from guess where) and also the source address if you list more

than one (assign aliases to the interfaces, and list all of

the IP address in "outgoing-interface" lines in config).


http://nlnetlabs.nl/publications/DNS_cache_poisoning_vulnerability.html


they have their own methods to avoid stomping on ports used

by other UDP services, but since they don't have control over

the rest of the OS, it's a bunch of config parameters, not

quite as elegant as using net.inet.udp.baddynamic populated

from /etc/services entries (see recent commits in source-

changes or in odc on www.squish.net/openbsd/)
Previous message: [thread] [date] [author]
Next message: [thread] [date] [author]
Messages in current thread:
Re: Actual BIND error - Patching OpenBSD 4.3 named ?, Stuart Henderson, (Thu Jul 10, 10:28 am)