topic Re: Cache pollution on DNS servers in Network Security https://community.cisco.com/t5/network-security/cache-pollution-on-dns-servers/m-p/551894#M90227 <HTML><HEAD></HEAD><BODY><P>In the general sense of cache pollution (cache poisoning) - DNS responses contain additional records that do not pertain to the query in an effort to poison the DNS server's cache. No, there is no signature for this. </P><P></P><P>I know Microsoft has a "cache pollution protection" knob on their DNS servers and recent versions of BIND also contain code to perform some additional checks and ignore the non-relevant responses. </P><P></P><P></P></BODY></HTML> Wed, 22 Mar 2006 20:38:41 GMT wsulym 2006-03-22T20:38:41Z Cache pollution on DNS servers https://community.cisco.com/t5/network-security/cache-pollution-on-dns-servers/m-p/551893#M90226 <P>looking for the sigID that would fire on this. We are running 4.1(5)S216.</P> Sun, 10 Mar 2019 09:56:40 GMT https://community.cisco.com/t5/network-security/cache-pollution-on-dns-servers/m-p/551893#M90226 5creedus 2019-03-10T09:56:40Z Re: Cache pollution on DNS servers https://community.cisco.com/t5/network-security/cache-pollution-on-dns-servers/m-p/551894#M90227 <HTML><HEAD></HEAD><BODY><P>In the general sense of cache pollution (cache poisoning) - DNS responses contain additional records that do not pertain to the query in an effort to poison the DNS server's cache. No, there is no signature for this. </P><P></P><P>I know Microsoft has a "cache pollution protection" knob on their DNS servers and recent versions of BIND also contain code to perform some additional checks and ignore the non-relevant responses. </P><P></P><P></P></BODY></HTML> Wed, 22 Mar 2006 20:38:41 GMT https://community.cisco.com/t5/network-security/cache-pollution-on-dns-servers/m-p/551894#M90227 wsulym 2006-03-22T20:38:41Z