Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 12 Oct 2013 14:25:12 -0400
From:      Allan Jude <freebsd@allanjude.com>
To:        freebsd-current@freebsd.org
Subject:   Re: May you please add alias for nslookup?
Message-ID:  <52599408.7060306@allanjude.com>
In-Reply-To: <5259925C.4030709@allanjude.com>
References:  <201310121634.r9CGYQRD053340@fire.js.berklix.net> <5259925C.4030709@allanjude.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On 2013-10-12 14:18, Allan Jude wrote:
> On 2013-10-12 12:34, Julian H. Stacey wrote:
>> RW wrote:
>>> On Sat, 12 Oct 2013 10:44:56 +0200
>>> Ivan Voras wrote:
>>>
>>>> explaning the user what has happened and optionally invoking "host"
>>>> or "dig".
>>> Actually dig has gone 
>> Rather cryptic for me so I looked:
>>
>> dig has gone from current src/usr.bin/dig 
>> nslookup & dig & host 
>> are all installed by either of current
>> ports/dns/bind99 or ports/dns/bind-tools 
>>
>>
>>> and has been replaced by the unbound utility
>>> drill. 
>> src/usr.bin/drill/
>>
>>
>> I agree with O.P. Zhifeng Hu's "this is a very basic tools".
>>
>> Removing src/contrib/bind9 from FreeBSD-10 will get criticised as:
>>  "Calls itself a server OS, but no name server out of the box!"
>>
>> Please resist periodic urges to strip src/ towards just a tool set
>> capable of rebuilding itself.  Tossing expected tools (even if a
>> port is more up to date & secure) will annoy users, & potential
>> immigrants from other Unixes may try then toss FreeBSD.
>>
>> Cheers,
>> Julian
> It is easier to keep bind up to date from ports. If you want DNSSEC
> support in 9, you have to replace the bind in base anyway....
>
> bind is replaced with unbound, which providers most of the functionality
> required in most instances.
>
> I forget the exact numbers, but when I looked about 20 of the security
> advisories over the last 10 years have been because of bind. That is
> over 12% of all vulnerabilities.
>
des@'s blog adds another important point, bind10 required python.
FreeBSD doesn't want to ship with python in base, so keeping bind wasn't
really an option



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?52599408.7060306>