Date: Fri, 23 May 2008 08:21:14 -0400 From: Steve Bertrand <iaccounts@ibctech.ca> To: Chuck Swiger <cswiger@mac.com> Cc: FreeBSD Questions <freebsd-questions@freebsd.org>, Jonathan Chen <jonc@chen.org.nz> Subject: Re: Multiple instances of BIND at startup Message-ID: <4836B6BA.4090706@ibctech.ca> In-Reply-To: <76B8A6DC-8CB4-46A4-9588-A6941080A942@mac.com> References: <48345138.8080507@ibctech.ca> <4834599A.1090108@infracaninophile.co.uk> <4834A7B4.9030302@ibctech.ca> <20080521232319.GA57359@osiris.chen.org.nz> <4834B7EE.3000002@ibctech.ca> <20080522020619.GA69543@osiris.chen.org.nz> <4834D891.6050707@ibctech.ca> <20080522035913.GA78449@osiris.chen.org.nz> <483503AD.60801@infracaninophile.co.uk> <4835634F.6060107@ibctech.ca> <20080522203932.GA74897@osiris.chen.org.nz> <76B8A6DC-8CB4-46A4-9588-A6941080A942@mac.com>
next in thread | previous in thread | raw e-mail | index | archive | help
> Well, BIND is up to 28 published security advisories: > > http://www.isc.org/sw/bind/bind-security.php#matrix > > ...which not only have included cache poisoning (2003-0914), but many of > them allowed for arbitrary code execution, often as root. Ok, then I'll ask the obvious... For those who are, or have been network ops within an Internet Service Provider environment, what DNS server do you recommend for reliability, functionality, and most importantly, ease of use so the helpdesk can make slight changes to client domains when required (hopefully without having to su to root). The latter point is why I went from BIND to TinyDNS (VegaDNS) in the first place, but it's seriously lacking with IPv6 support. Steve
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4836B6BA.4090706>