nslookup problems

[Cricket Liu]

Jim Reid <jim at mpn.cp.philips.com> wrote in message
news:<29201.931188897 at kludge.mpn.cp.philips.com>...
> Option [1] is best IMHO. Getting rid of nslookup is a Good Thing. If
> nslookup is *really* needed - why? - Option [2] is the least bad
> choice. Option [3] is worst as it promotes the continued use of
> ancient versions of nslookup and its ugly inverse queries that are
> well past their sell-by date.

Option [3] is particularly bad in older name servers (pre BIND 8.1.2), since
it exposes a buffer overrun in the name server.  See
http://www.cert.org/advisories/CA-98.05.bind_problems.html for more
information.

cricket

Acme Byte & Wire
cricket at acmebw.com
www.acmebw.com

Attend our next DNS and BIND class!  See
www.acmebw.com/training.htm for the
schedule and to register for upcoming
classes.