Simon C. Ion wrote:

Decius wrote:
Most people should be more concerned about the state of their firewall.

'Twould seem that running bind behind a OpenWRT 7.09 based NAT is A-Okay. I'm glad that the OpenWRT folks got that stuff right.

Yup IPTables and PF both seem to have gotten this right, but several enterprise solutions aren't as good.

RE: Apple in a bind over its DNS patch? | News - Security - CNET News.com