On Thu, Mar 15, 2001 at 11:46:55AM +0200, Tommi Komulainen wrote:
> On Thu, Mar 15, 2001 at 09:23:02AM +0000, Gavin Hamill wrote:
> > 
> > The most useful thing I can think of for the CHAOS class is the following:
> > 
> > [EMAIL PROTECTED]:~/test$ nslookup -q=txt -class=CHAOS version.bind. 0
> > 
> > That'll only work on real nslookup's, which doesn't include the current
> > Debian one which complains about being deprecated...
> 
> Well, it's time to learn to use 'dig' and 'host' anyway, so:
>     
>     host -c chaos -t txt version.bind. localhost
>     dig @localhost version.bind. txt chaos

aha!

        ;; ANSWER SECTION:
        VERSION.BIND.           0S CHAOS TXT    "deceptive version name"

okay -- i'm using the 'deception approach' to the security-rife
'bind' (according to posts i've seen here):

        // in /etc/bind/named.conf (that's where slink put it, and
        // potato still seems to work from there)...
        options {
                version "something as unlike 'BIND' as i can get";
        };

that's "chaos"? :)

-- 
It is always hazardous to ask "Why?" in science, but it is often
interesting to do so just the same.
                -- Isaac Asimov, 'The Genetic Code'

[EMAIL PROTECTED]
http://newbieDoc.sourceforge.net/ -- we need your brain!
http://www.dontUthink.com/ -- your brain needs us!

Reply via email to