Re: large organization nameservers sending icmp packets to dns servers.

[Doug Barton <dougb () dougbarton us>]

On Wed, 8 Aug 2007, David Conrad wrote:

> How many bytes of shell code can you stuff in a 512 byte DNS UDP packet?

How many bytes of shell code can you stuff into a 4096 byte EDNS0 UDP 
packet? :)

> P.S. I still think blocking TCP/53 is stupid.

Agreed.

--

        If you're never wrong, you're not trying hard enough