Re: how to protect name servers against cache corruption

[tqbf () smtp enteract com]

In article <Pine.LNX.3.91.970729213405.4111A-100000 () luna moonstar com>, you wrote:
> Simply stating that there's a better way without Sending Code is a copout.

I realize I'm dragging this on, and I apologize, but:

It's totally valid to report a problem that affects the operations
community without providing a fix. Knowledge of the fact that a problem
exists is valuable, even without a cookbook resolution.

In this case, a few people (some not on this list) would like the
operations community to realize that there are, in fact, some very doable
attacks that remain unaddressed by BIND 8.1.1. 

-- 
----------------
Thomas Ptacek at EnterAct, L.L.C., Chicago, IL [tqbf () enteract com]
----------------
exit(main(kfp->kargc, argv, environ));