[AusNOG] Telstra manipulating DNS to block botnets

[Mark Andrews]

In message <EC3BB498-2C8D-4598-9C6A-D956D15D2114 at hooton.org>, David Hooton writ
es:
> Sadly wether we like it or not, most customers DO need to be protected =
> from themselves and its our job to make sure they know when we are =
> helping them do the thinking.

Returning NXDOMAIN is not protecting them from themselves.  It is
hiding / masking the problem.  A infected machine is open to
re-infection unless the path that introduced the infection is closed.

One of best ways to prevent re-infection is to ensure that all
software is up-to-date.

	"clean and update" or "re-install and update"

Mark
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: marka at isc.org