Problem resolving one particular domain

Stephane Bortzmeyer bortzmeyer at nic.fr
Wed Jul 27 10:51:00 UTC 2011


On Wed, Jul 27, 2011 at 10:31:30AM +0200,
 Stephane Bortzmeyer <bortzmeyer at nic.fr> wrote 
 a message of 34 lines which said:

> 1) It means you are vulnerable to Kaminsky-style cache poisoning. In
> 2011, 'query-source port 53;' should have disappeared a long time
> ago.

For the record, there are still around 1 % of queries (1.5 % of
resolvers) coming towards .FR authoritative name servers which have
source port 53 :-(



More information about the bind-users mailing list