Re: FreeBSD Security Advisory: FreeBSD-SA-01:18.bind

From: Przemyslaw Frasunek (venglin@freebsd.lublin.pl)
Date: 02/01/01 

Date: Thu, 1 Feb 2001 01:48:19 +0100
From: Przemyslaw Frasunek <venglin@freebsd.lublin.pl>
To: freebsd-security@freebsd.org

On Wed, Jan 31, 2001 at 11:55:18PM +0200, Roman Shterenzon wrote:
> Why not make it default in the base system?

The best workaround is not using BIND at all. Consider some alternatives,
like /usr/ports/net/djbdns. 

-- 
* Fido: 2:480/124 ** WWW: http://www.frasunek.com/ ** NIC-HDL: PMF9-RIPE *
* Inet: przemyslaw@frasunek.com ** PGP: D48684904685DF43EA93AFA13BE170BF *
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message

Relevant Pages

  • Re: FreeBSD Security Advisory: FreeBSD-SA-01:18.bind
    ... >> Why not make it default in the base system? ... > The best workaround is not using BIND at all. ... Why work around BIND limitiations and do all this sandboxing to try to ... with "unsubscribe freebsd-security" in the body of the message ...
    (FreeBSD-Security)
  • Re: nss_ldap and openldap importing
    ... majority of machines would benefit from it. ... something new gets added to the base system it needs to have a pretty large ... I haven't seen any reasons why ldap ... of having BIND in the base). ...
    (freebsd-current)
  • Re: Somethings happening with named
    ... > If someone could briefly explain the versioning used by bind, ... is it worth upgrading to T9B (or whatever the latest ... You can install the bind8 port over your current bind ... with "unsubscribe freebsd-security" in the body of the message ...
    (FreeBSD-Security)
  • Re: [freebsd-stable] Re: BIND update?
    ... Tuc at T-B-O-H.NET wrote: ... anyhow, I use base system bind and didn't plan to change that. ...
    (freebsd-stable)
  • Re: dns update for 7.0
    ... What's the process to update the base bind in freebsd for the new ... I'm running freebsd 7.0-RELEASE-p2 and I am using the included base ... You don't need to overwrite the base system bind -- the vulnerability ... The patches ISC have produced will have an adverse effect if you're answering something in excess of 10,000 DNS queries a second, which is rather more than most people would get to deal with, but are otherwise innocuous. ...
    (freebsd-questions)