From owner-freebsd-questions@FreeBSD.ORG Sun Aug 5 05:35:58 2007 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id E735916A417 for ; Sun, 5 Aug 2007 05:35:58 +0000 (UTC) (envelope-from rakheshster@gmail.com) Received: from wx-out-0506.google.com (wx-out-0506.google.com [66.249.82.236]) by mx1.freebsd.org (Postfix) with ESMTP id AD21513C459 for ; Sun, 5 Aug 2007 05:35:58 +0000 (UTC) (envelope-from rakheshster@gmail.com) Received: by wx-out-0506.google.com with SMTP id i29so897222wxd for ; Sat, 04 Aug 2007 22:35:57 -0700 (PDT) DKIM-Signature: a=rsa-sha1; c=relaxed/relaxed; d=gmail.com; s=beta; h=domainkey-signature:received:received:received:date:x-x-sender:to:cc:subject:in-reply-to:message-id:references:mime-version:content-type:from:sender; b=PqPyiWQiF4LsCvz+rAwO7vvFswIgEptsvh4c4v6VnwoMndauw4Fh1KdUKDfRqB7QmiYin97MD3SxVRGybPTw3CDOl4pxm2otgKgin85X+AzU6g9gv6CmflTxz2RzTa0JUuOK+EtUO+mW5Z6Ig8TPQRk2EDyq91TMd+9swI9/vmI= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:date:x-x-sender:to:cc:subject:in-reply-to:message-id:references:mime-version:content-type:from:sender; b=Rea74UKwQDZEqirG/yCGvzL2bAnq9auZ5tvoMroSrsgvr5VpPJ/24u+QHTYnWCJ2Z7taQV9ZHnJ5Sj7pwBPEEbi9fMR2XoH2omz7extw3I0cpQxhAPIgFp5zbKjo4Adk9QMubDDEQ8gf0YSsZOENrGZieSLB2dGoT/30d2S5DDA= Received: by 10.70.11.5 with SMTP id 5mr7733719wxk.1186292157749; Sat, 04 Aug 2007 22:35:57 -0700 (PDT) Received: from smtp.home.rakhesh.com ( [82.178.137.21]) by mx.google.com with ESMTPS id m33sm5551673ele.2007.08.04.22.35.53 (version=TLSv1/SSLv3 cipher=OTHER); Sat, 04 Aug 2007 22:35:57 -0700 (PDT) Received: from scrat.home.rakhesh.com (scrat.home.rakhesh.com [192.168.17.31]) by smtp.home.rakhesh.com (Postfix) with ESMTP id 2A22211420; Sun, 5 Aug 2007 09:35:32 +0400 (GST) Date: Sun, 5 Aug 2007 09:35:32 +0400 (GST) X-X-Sender: rakhesh@scrat.home.rakhesh.com To: Doug Barton In-Reply-To: <46B0F17C.2010506@FreeBSD.org> Message-ID: <20070805091932.B67919@scrat.home.rakhesh.com> References: <499c70c0707260136hea82f27s87dfa53432d0e409@mail.gmail.com> <94c6ae7ae570814564d364bfe9aad8ea@szalbot.homedns.org> <20070801030504.GA3773@bifrost.agrussell.com> <426DE541-FB51-44FF-B7F4-B34E0F9A7861@goldmark.org> <46B0DB5F.4020401@FreeBSD.org> <60BEAECB-C72A-46B3-90D7-F3AB8778605D@goldmark.org> <46B0F17C.2010506@FreeBSD.org> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed From: Rakhesh Sasidharan Sender: Rakhesh Sasidharan Cc: Zbigniew Szalbot , "A.G. Russell IV" , Jeffrey Goldberg , Freebsd questions Subject: Re: Waiting for BIND security announcement X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 05 Aug 2007 05:35:59 -0000 Hi! Was going through this slightly old thread and wanted to clear somethings up for myself. >> >>> If you want to stay as close as possible to 6.2-RELEASE but also >>> include the fixes that the security officer deems important enough to >>> release widely, use the tag RELENG_6_2 (usually in your supfile for >>> cvsup or csup). If you want the latest code for 6-stable, which will >>> eventually become 6.3-RELEASE, use just RELENG_6. I use 'freebsd-update' to keep my 6.2 installation up-to-date. So that means I would be following the RELENG_6_2 tag, right? > In addition to security issues, the ports give you a greater degree of > flexibility in how BIND is configured. If you're going to be offering > a public name server (and by that I hope you mean authoritative, not > recursive) on 6-stable you're probably better off using 9.4.x anyway, > with the threading option disabled. > >> Are there other things in /usr/src/contrib that follow this pattern? > > Sure, lots. Too many for me to list without having to think hard about > it and potentially leave something out. This has probably been asked before, but if BIND is available in ports then why is it also available in contrib? Are there any benefits in choosing the one in contrib over the one in ports? Regards, Rakhesh