Date: Sun, 05 Aug 2007 09:42:47 -0700 From: Doug Barton <dougb@FreeBSD.org> To: Rakhesh Sasidharan <rakhesh@rakhesh.com> Cc: Zbigniew Szalbot <zbigniew@szalbot.homedns.org>, "A.G. Russell IV" <arussell@bifrost.hos.net>, Jeffrey Goldberg <jeffrey@goldmark.org>, Freebsd questions <freebsd-questions@freebsd.org> Subject: Re: Waiting for BIND security announcement Message-ID: <46B5FE07.5080004@FreeBSD.org> In-Reply-To: <20070805091932.B67919@scrat.home.rakhesh.com> References: <499c70c0707260136hea82f27s87dfa53432d0e409@mail.gmail.com> <94c6ae7ae570814564d364bfe9aad8ea@szalbot.homedns.org> <20070801030504.GA3773@bifrost.agrussell.com> <426DE541-FB51-44FF-B7F4-B34E0F9A7861@goldmark.org> <46B0DB5F.4020401@FreeBSD.org> <60BEAECB-C72A-46B3-90D7-F3AB8778605D@goldmark.org> <46B0F17C.2010506@FreeBSD.org> <20070805091932.B67919@scrat.home.rakhesh.com>
next in thread | previous in thread | raw e-mail | index | archive | help
Rakhesh Sasidharan wrote:
> This has probably been asked before,
Heh, no, never. :)
> but if BIND is available in ports then why is it also available in
> contrib?
Couple of reasons, of relatively equal importance depending on who you
speak to. BSD systems have "always" (I haven't verified this, but
people who should know have told me) shipped with dns stuff on board,
so there is resistance to the idea of stripping it out for that
reason. The other thing that is a concern to a lot of people is that
BIND is more than just named. Take a look at the WITHOUT_BIND* knobs
in src.conf(1) in 7-current or make.conf(1) in 6-stable to get an idea
of how things break down. I have a standing offer to either remove
BIND from the base, or flip the defaults for some of those knobs to
"NO" if the community wants it that way.
> Are there any benefits in choosing the one in contrib over the one
> in ports?
Advantage to the one in contrib is that it's right there, and the new
default named.conf (and associated files) makes it possible to start
up a local resolver "out of the box."
If you want a greater degree of freedom in build-time configuration,
or you want a version other than what is in your base (for example,
you want to use 9.4.x but you're on a 6-stable machine), then you can
use the ports. The ports also have an option to overwrite the files in
the base if that makes things easier in your environment.
hth,
Doug
--
This .signature sanitized for your protection
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?46B5FE07.5080004>