-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -- Jeff Shultz <jeffshultz@wvi.com> wrote:

So, is there a list of domains that we could null-route if we could convince our DNS managers to set us up as the SOA for those domains on our local DNS servers - thus protecting our own customers somewhat?

I won't discount the assertion that there is some sort of emergency occurring. I would however, like to see a bit of a reference to where we can learn more about what is going on (I assume this is the javascript exploit I heard about a couple days ago).

Yes -- I would suggest that the best point of reference right now is the SANS ISC Daily Handler's Diary. They have done a great job of summarizing the issues: http://isc.sans.org/ - - ferg -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.6.0 (Build 214) wj8DBQFGDcucq1pz9mNUZTMRAp6KAKCB2Pm1AE1Muawlfz33pSfb0Ij67wCeM7Sk 57+JNx+REjiILkNkdSerqQQ= =d3Bq -----END PGP SIGNATURE----- -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawg(at)netzero.net ferg's tech blog: http://fergdawg.blogspot.com/