Date: 17 Sep 2003 13:47:38 -0800 From: "W.D. McKinney" <dee@akwireless.net> To: freebsd-isp@freebsd.org Subject: Re: Re[2]: Verisign fun. Message-ID: <1063835258.6538.245.camel@papa.wdm.com> In-Reply-To: <48322287.20030917233959@blue.calx.nl> References: <20030917081828.GC43577@mccaffrey.house.so14k.com> <48322287.20030917233959@blue.calx.nl>
next in thread | previous in thread | raw e-mail | index | archive | help
I saw that on the ISC bind9-users list also. We have moved off our bind9 servers to djbdns a couple days agao and there are patches for that version also, but we have decided to let the dust settle as impact is minimal right now. I always say, "Only the experienced walk with a limp." Dee On Wed, 2003-09-17 at 13:39, Walter Hop wrote: > [in reply to secabeen@pobox.com, 17-9-2003] > > >> I don't know about you guys but the verisign redirecting all > >> unregistered .com/.net domains is annoying. Someone pointed this out to > >> me. > >> > >> http://achurch.org/bind-verisign-patch.html > > > > If you want to do something like this, here's the official ISC patch: > > > > http://www.isc.org/products/BIND/delegation-only.html > > If you do this patch, test it carefully. I have had serious resolution > problems with the patch on FreeBSD 4.8, and somebody else on bind9-users > with Solaris had the same. > > Unless you host applications or networks that break, I would suggest > waiting a few days to see if an updated version becomes available. > > I am nullrouting the IP addresses of Verisign's spam webservers for now. > > cheers, > walter
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?1063835258.6538.245.camel>