Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Your resolver may not always permit this sort of thing, and that would just obfuscate what they're doing a step further which may come across as sneaky.

I doubt it is at all common in end user environments, but unbound for instance can be configured to prevent local IPs from being resolved in other domains. It's a good practice to follow in a datacenter environment if you're connecting out to hostnames you resolve from DNS you don't control.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: