nanog mailing list archives

Re: Yet another Quadruple DNS?


From: joel jaeggli <joelja () bogus com>
Date: Thu, 29 Mar 2018 11:27:09 -0700



On 3/29/18 10:59 AM, Stephen Satchell wrote:
In regards to: spoofing DNS to 8.8.8.8 et al

On 03/29/2018 09:26 AM, Baldur Norddahl wrote:
Running your own resolver will not work.

Why won't it work?  I run a Linux box with BIND 9 set up as a
recursive resolver.  Are you saying that the rogues will also capture
requests to the root DNS servers, as described in the hints file?
All destination port 53 udp packets.


Current thread: