Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:
edgeos



Penetration Testing: Re: [PEN-TEST] DNS testing tool

Re: [PEN-TEST] DNS testing tool

From: Gary E. Miller <gem_at_RELLIM.COM>
Date: Wed, 7 Mar 2001 11:58:42 -0800

Yo Laura!

On Wed, 7 Mar 2001, [iso-8859-1] Laura Nuņez wrote:

> I have this, by the moment
> - Assign reverse DNS to only those host that require it

IMHO, I think this is wrong.

Not having reverse DNS is just security by obscurity. Script
kiddies will just use a tool like nmap to sweep you entire IP
range.

You break a lot of things by not having a full reverse DNS.

A full and matching forward and reverse DNS is mandated by the RFCs.

RGDS
GARY
---------------------------------------------------------------------------
Gary E. Miller Rellim 20340 Empire Ave, Suite E-3, Bend, OR 97701
        gem_at_rellim.com Tel:+1(541)382-8588 Fax: +1(541)382-8676
Received on Mar 07 2001

[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
edgeos