I found this KB concerning Cache Pollution:
http://support.microsoft.com/support/kb/articles/Q241/3/52.asp
It concerns a registry DWORD SecureResponses with a value of 1 in the same registry as
Len's entry.
bob
On Friday, May 18, 2001 11:24 AM, Len Conrad <[EMAIL PROTECTED]> wrote:
>
>>what's the hack, there might be a hotfix out for it.
>
>here�s for turning off recursion:
>
>� Add the value NoRecursion to the Registry key
>HKEY_LOCAL_MACHINE\SYSTEM\
>CurrentControlSet\Services\DNS\Parameters
>� The value type is REG_DWORD
>� Value is 1 (true, recursion disabled)
>
>Note that turns off recursion completely, rather than limit it to your ip
>blocks.
>
>I think there is a hack for turning off glue-fetching. "you could look it up"
>on MS site.
>
>you need to turn of recursion and glue-fetch to prevent cache
>poisoning.
>
>Len
>
>http://MenAndMice.com/DNS-training
>http://BIND8NT.MEIway.com : ISC BIND 8.2.3 "NT3" for NT4 & W2K
>http://IMGate.MEIway.com : Build free, hi-perf, anti-abuse
>mail gateways
>
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
