From owner-freebsd-questions@FreeBSD.ORG  Fri Aug 29 19:47:31 2008
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: questions@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 241611065673
	for <questions@freebsd.org>; Fri, 29 Aug 2008 19:47:31 +0000 (UTC)
	(envelope-from gpeel@thenetnow.com)
Received: from thenetnow.com (thenetnow.com [69.90.69.141])
	by mx1.freebsd.org (Postfix) with ESMTP id F3AF28FC23
	for <questions@freebsd.org>; Fri, 29 Aug 2008 19:47:30 +0000 (UTC)
	(envelope-from gpeel@thenetnow.com)
Received: from localhost.thenetnow.com ([127.0.0.1] helo=thenetnow.com)
	by constellation.thenetnow.com with esmtp (Exim 4.63 (FreeBSD))
	(envelope-from <gpeel@thenetnow.com>) id 1KZ9wP-000CzY-No
	for questions@freebsd.org; Fri, 29 Aug 2008 15:47:29 -0400
From: "gpeel" <gpeel@thenetnow.com>
To: questions@freebsd.org
Date: Fri, 29 Aug 2008 15:47:29 -0400
Message-Id: <20080829193718.M43174@thenetnow.com>
In-Reply-To: <20080829182700.M90624@thenetnow.com>
References: <20080829182700.M90624@thenetnow.com>
X-Mailer: Open WebMail 2.51 20050228
X-OriginatingIP: 216.240.12.2 (gpeel@thenetnow.com)
MIME-Version: 1.0
Content-Type: text/plain;
	charset=iso-8859-1
Cc: 
Subject: Re: BIND DNS Patching on 6.1, 6.2
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 29 Aug 2008 19:47:31 -0000

Hi Again,

When I posted this question originally, I had forgotten that I had a devel 
server running FreeBSD 6.2-RELEASE. I tried the 6.3 patch, and it would not 
make properly.

I was thinking I would try the BIND959.5.0 port, but it apprears that this 
version is still vulneralbe.

So I suppose the only question is, what branch + version should one upgrade 
to to secure this. (I assume 6.3 RELENG or 6 Stable).

COmments please,

-Grant


On Fri, 29 Aug 2008 14:29:13 -0400, gpeel wrote
> Hi all,
> 
> I have ten webservers that I would like nothing more than to update 
> to 6.3 or 
> 7.x
> 
> But right now I just dont have time.
> 
> I was wondering if anyone has tried the patches BIND DNS Poioning 
> listed on the freebsd homepage (security advisories) on 6.1 and/or 
> 6.2 and if they worked OK.
> 
> -Grant
> _______________________________________________
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org"