I had been arguing with my close friend on this issue for quite a while, base on your ideas prove that I am right, let me show him your webpage then I am sure it must make him buy me a drink, lol, thanks.
- Lora kids jokes
NS records contain hostnames, not addresses. As a result, a server may give a referral to another name server without also giving its address. If the name server’s name is inside the domain being delegated, the parent is required to provide an address, but in other cases, the child server may be unreachable.
DNS over TCP is slow and prone to denial of service attacks, so it is generally not used except for zone tansfers. DNS over UDP is vulnerable to response spoofing: a client can’t tell where the UDP packet came from, so an attacker who can sniff requests can easily send false responses. If the requests aren’t sniffable, an attacker can still send false responses, but ey has to guess the query ID and the port the query was sent from. Incorrect guesses incur no penalty for the attacker, however, and BIND uses the same port for all queries.jocuri 3d