Re: [SLUG] Verisign Annoyance?

From: Andrew M Hoerter (amh@pobox.com)
Date: Sat Sep 27 2003 - 21:28:24 EDT


On Fri, 26 Sep 2003, Levi Bard wrote:

> So, what's the consensus, iptables or route? I'm personally leaning
> toward iptables on the principle that it will only affect, say, my
> incoming traffic, whereas if I use route, every packet will have to
> cascade through the routing table before hitting the default route (in my
> case).

The best solution is to fix your nameserver(s) so it ignores the wildcard
record altogether. (for example, using the delegation-records-only
feature in BIND 9)

-----------------------------------------------------------------------
This list is provided as an unmoderated internet service by Networked
Knowledge Systems (NKS). Views and opinions expressed in messages
posted are those of the author and do not necessarily reflect the
official policy or position of NKS or any of its employees.



This archive was generated by hypermail 2.1.3 : Fri Aug 01 2014 - 19:05:39 EDT