hi, here is a quick and dirty hack for bind8 written by an anger guy (as we all are against verisgin) http://achurch.org/bind-verisign-patch.html
here for dnscache http://tinydns.org/djbdns-1.05-ignoreip.patch of course, this has already been slashdot'ed. here is another url: http://www.imperialviolet.org/dnsfix.html from the link : "You might want to let folks know that ISC is working on this issue now, and they will have a more general solution to the problem." i can let you know that, for FreeBSD we clearly want to filter this even for the local resolver in the source base. we just wait for isc patches that should be ready for today or just later. cheers. julien mabillard. -- Key fingerprint = C549 46E1 1B75 116E 3321 BC0A E502 9457 319E B340 RFC822: [EMAIL PROTECTED] || [EMAIL PROTECTED] << www.NetBSD.org ---------------------------------------------- [EMAIL PROTECTED] Maillist-Archive: http://www.mail-archive.com/swinog%40swinog.ch/