Re: IP over DNS.

[Darren Reed <darrenr () reed wattle id au>]

None of the below will block DNS packets for the IP over DNS module.
Believe me, if it will work using named as a proxy in normal operation
then there is nothing below which will stop it from working.

In some email I received from Bill_Royds () pch gc ca, sie wrote:
> Frank Knobbe <FKnobbe () KnobbeITS com> on 09/14/2000 12:45:56
>  To:      "'Matt Cramer'" <mscramer () armstrong com>,           
>           firewall-wizards () nfr net                            
>  cc:      (bcc: Bill Royds/HullOttawa/PCH/CA)                 
>                                                               
>  Subject: RE: [fw-wiz] IP over DNS.                           
>
> <snip>
> Afaik, there is no DNS proxy that actually examines the contents of
> DNS queries and replies...
>
> Any thoughts on this?
>
> Frank
>
>
> Some Application Gateway Firewalls, such as Axent Raptor, have DNS proxies that
> verify the correctness of the DNS traffic. The Raptor proxy actually asks as a
> DNS forwarder, verifying the adherence to the RFC's for all entries (not
> allowing characters for hosts or domains outside of DNS standard). It ensures
> that TXT records are 7-bit ASCII although someone could probably base 64 encode
> binary to get by it.
>
> _______________________________________________
> Firewall-wizards mailing list
> Firewall-wizards () nfr net
> http://www.nfr.net/mailman/listinfo/firewall-wizards


_______________________________________________
Firewall-wizards mailing list
Firewall-wizards () nfr net
http://www.nfr.net/mailman/listinfo/firewall-wizards