Re: DNS vulnerabilities in shared host environments

From: Frank Tegtmeyer (fte-sub-bugtraq@fte.to)
Date: 04/24/03

  • Next message: bugzilla@redhat.com: "[RHSA-2003:142-01] Updated LPRng packages fix psbanner vulnerability" 
    To: bugtraq@securityfocus.com
From: Frank Tegtmeyer <fte-sub-bugtraq@fte.to>
Date: 24 Apr 2003 20:58:37 +0200

    Chris Leishman <chris@leishman.org> writes:

    > ... and also use the same DNS server for resolving addresses
    > internally.

    Separation of resolving and authoritative servers is the recommended
    configuration for years now. Good DNS software enforces this
    practice or even doesn't provide a way to merge the two functions.

    Regards, Frank

  • Next message: bugzilla@redhat.com: "[RHSA-2003:142-01] Updated LPRng packages fix psbanner vulnerability"

    Relevant Pages

    • Re: Sniffer - Hows the best way to deploy ?
      ... I think this desktop must have two NIC, one with no ip configuration and other with ip configuration and also connected to another port that we can collect the data ... If you're on Unix/Linux tcpdump or ethereal are the best choice, ... practice to master. ... SensePost willl be at Black Hat Vegas in July. ...
      (Security-Basics)
    • Re: DTC
      ... it's good practice to have it configured just in case. ... DTC, the revision of an existing app or the release of the next app may ... The recommended practice depends on the configuration of applications. ... practice to give the MSDTC its own cluster group with appropriate resources. ...
      (microsoft.public.sqlserver.clustering)
    • Re: Landing with one spoiler
      ... But many places do not practice for this. ... Full spoilers deployed (to achieve symmetry) through approach, ... symmetrical, and control the approach in a regular configuration, than ... Just because there are several stories reported here of pilots who ...
      (rec.aviation.soaring)
    • Re: Wanted: *Practical* Approach to Backups
      ... say by default but with parameters added to the shortcut command line, can be made to store their data, configuration info etc to a separate location. ... As far as I know, for example, there is no way to tell FrameMaker to look for maker.ini (its configuration file) anyplace other than the program directory. ... For example, Eudora hard-codes the path to attachments in mailbox files, so moving the attachments directory to some other location would break the links between messages and attachments. ... is this really what people do in practice: jump through hoops of file to coerce all their programs to put their configuration and user data in a special "data" directory so that it can be easily backed up? ...
      (microsoft.public.win2000.general)
    • Re: Landing with one spoiler
      ... >But many places do not practice for this. ... >Full spoilers deployed (to achieve symmetry) through ... >typical error we find made by pilots in this configuration ...
      (rec.aviation.soaring)