Damian Menscher wrote:

On Mon, 9 Aug 2004, Christopher X. Candreva wrote:


Suppose there was a DNS entry, say virusdb.clamav.net (or
version.virusdb.clamav.net, etc), that returned simply a text record with
the current DB version in it.



After seeing a Defcon talk on putting arbitrary data in DNS, though, I
wonder if we could put the daily updates (gpg signed) into DNS? That
would take a lot of load off the mirrors (occasional checks for main.cvd
updates are all that is required). And caching DNS servers would
distribute the load a bit.


You know, this isn't so crazy after all. I put arbitrary data on my DNS server so that exim
can get config data using dnsdb lookup. Its cheaper than mysql lookup (Plus, you eliminate single point of failure),
and you can still update config from a central location instead of updating each server config.


The only snag, is that TXT record is limited to a number of bytes ( I tried putting 4096 bytes on it, it didn't work).
Now, the question is, can the daily (or hourly) updates fit in a single TXT record?
If it must span multiple records than it will be somewhat complicated ....


Regards,

Fajar
--
http://justreadthis.com/


------------------------------------------------------- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink & Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users

Reply via email to