[62130] in North American Network Operators' Group
Verisign Countermeasures - BIND and djbdns patches
daemon@ATHENA.MIT.EDU (Adam Langley)
Tue Sep 16 11:04:43 2003
Date: Tue, 16 Sep 2003 16:04:07 +0100
From: Adam Langley <agl@imperialviolet.org>
To: nanog@merit.edu
Errors-To: owner-nanog-outgoing@merit.edu
On Tue, Sep 16, 2003 at 04:03:08PM +0100, Adam Langley wrote:
I'm collecting countermeasures to the verisign wildcard DNS records
at http://www.imperialviolet.org/dnsfix.html. Currently there are
patches for BIND 9.2.2 and djbdns (not authored by myself) and a
Linux userland/netfilter program that rewrites DNS packets (which is).
If anyone has other patches/countermeasures I'm happy to maintain a list
of links at the above URL.
--
Adam Langley agl@imperialviolet.org
http://www.imperialviolet.org (+44) (0)7906 332512
PGP: 9113 256A CC0F 71A6 4C84 5087 CDA5 52DF 2CB6 3D60
