[nsd-users] enumerate an ipv6 reverse zone in 2 minutes

Peter Koch pk at DENIC.DE
Wed Dec 10 21:46:02 UTC 2014


On Wed, Dec 10, 2014 at 10:32:30PM +0100, A. Schulze wrote:

> My question: would it be possible to modify nsd to answer queries in a  
> different way?

see chapter 4 in <http://www.dfn-cert.de/dokumente/workshop/2005/dfncert-ws2005-f7paper.pdf>
Of course, the proposed mitigation (sketched out for BIND) would be
incompatible with "qname minimization" ...

-Peter



More information about the nsd-users mailing list