[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: nameserver for class CHAOS ?



On Thu, Mar 15, 2001 at 11:46:55AM +0200, Tommi Komulainen wrote:
> On Thu, Mar 15, 2001 at 09:23:02AM +0000, Gavin Hamill wrote:
> > 
> > The most useful thing I can think of for the CHAOS class is the following:
> > 
> > gdh@eddie:~/test$ nslookup -q=txt -class=CHAOS version.bind. 0
> > 
> > That'll only work on real nslookup's, which doesn't include the current
> > Debian one which complains about being deprecated...
> 
> Well, it's time to learn to use 'dig' and 'host' anyway, so:
>     
>     host -c chaos -t txt version.bind. localhost
>     dig @localhost version.bind. txt chaos

aha!

	;; ANSWER SECTION:
	VERSION.BIND.		0S CHAOS TXT	"deceptive version name"

okay -- i'm using the 'deception approach' to the security-rife
'bind' (according to posts i've seen here):

	// in /etc/bind/named.conf (that's where slink put it, and
	// potato still seems to work from there)...
	options {
		version "something as unlike 'BIND' as i can get";
	};

that's "chaos"? :)

-- 
It is always hazardous to ask "Why?" in science, but it is often
interesting to do so just the same.
		-- Isaac Asimov, 'The Genetic Code'

will@serensoft.com
http://newbieDoc.sourceforge.net/ -- we need your brain!
http://www.dontUthink.com/ -- your brain needs us!



Reply to: