Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 11 Apr 2001 23:13:24 -0700 (PDT)
From:      Linh Pham <lplist@closedsrc.org>
To:        Chris Angell <root@chrisangell.com>
Cc:        <freebsd-questions@freebsd.org>
Subject:   Re: DNS Question
Message-ID:  <Pine.BSF.4.33.0104112307520.30214-100000@q.closedsrc.org>
In-Reply-To: <Pine.BSF.4.21.0104112235050.50365-100000@redqueen.chrisangell.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On 2001-04-11, Chris Angell scribbled:

# Apr 11 21:38:03  named[49549]: XX /211.219.153.124/version.bind/TXT/CHAOS

If you run nslookup with:

set type=txt
set class=chaos
version.bind

on most DNS servers running BIND, it will return the release/version
string. So you are getting a lot of people who are trying to see which
version of BIND you are running and try to hack it if it's a version
that has vulnerabilities.

Which version of BIND are you running? If you are running BIND
8.2.3-Txx, then you should upgrade to at least 8.2.3-REL. BIND 9.1.x-REL
is recommended since it has dropped quite a bit of the legacy (and
buggy) BIND code.

BIND 8 and BIND 9 are available from Ports... just make sure that you
cvsup/sync up your ports collection before building from your current
ports collection.

-- 
Linh Pham
[lplist@closedsrc.org]

// 404b - Brain not found



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.33.0104112307520.30214-100000>