First, note that Apple is listed as "unknown" as to whether this
impacts OS X or not. I suspect it may, but...
Why on earth would one permit this traffic through their firewall to
their DNS servers? You should be filtering nsupdate messages from all
but trusted hosts.
DNS is very fragile. This is well known. If you're not securing your
DNS servers then you're going to get burned by any one of a number of
issues with DNS in general. It's also another reason why most sites
shouldn't be running their own DNS. Heck, even MSFT doesn't, you think
Ma & Pa InternetSite should? (Rhetorical question.)
-d
------------------------------------------------------------------------
Dan Shoop
Computer Scientist
email@hidden
