[ntp:questions] Re: "restrict" option : help

David Schwartz davids at webmaster.com
Sat Jun 25 20:25:23 UTC 2005


"Tim" <tim at mail.localhost.invalid> wrote in message 
news:174rt99lx7wno.48tqr5cetfzl.dlg at 40tude.net...

> "Jojo" <jdptr at cleanthisfree.fr> wrote

>>> To use the IP address instead of DNS name in all restrict statement is
>>> quite embarrasing, since the IP can change in future. What do you think 
>>> ?
>
> "David Schwartz" <davids at webmaster.com> posted:
>
>>     Unfortunately, it's the only way to prevent someone from being able 
>> to
>> easily change which connections you allow.
>
> I would have though that anyone with the ability to poison your DNS 
> records
> could similarly adjust IP addressing/routing.

    No way.

    DS





More information about the questions mailing list