How can you secure this information RE: Easy way to determine BIN D version remotely?

[Mark.Andrews at nominum.com]

	How about looking at

	http://www.isc.org/products/BIND/docs/config/options.html

	Note, obsuring the version does not provide real security
	benefits as it is possible to determine the BIND version remotely
	with just ordinary queries.

	Mark

> 
> How can you stop the version from being able to be listed. Is there a stateme
> nt I have to put in the named.conf?
> Thanks
> Christian D. Stratton
> 
> 
> 
> 
> -----Original Message-----
> From: Len Conrad [mailto:lconrad at Go2France.com]
> Sent: Monday, May 01, 2000 6:59 AM
> To: bind-users at isc.org
> Subject: RE: Easy way to determine BIND version remotely?
> 
> 
> dig @ns.domain.com txt chaos version.bind.
> 
> 
> 
> 
> >YOu can do
> >
> >nslookup > set class=chaos
> >nslookup > set type=txt
> >nslookup > version.bind
> >
> >This will give you the bind vesion.
> >
> >Hope it helps
> >+DJ
> >
> >-----Original Message-----
> >From: See_email_ at ddress_below.This_one_is.invalid
> >[mailto:See_email_ at ddress_below.This_one_is.invalid]
> >Sent: Sunday, April 30, 2000 3:56 AM
> >To: comp-protocols-dns-bind at moderators.isc.org
> >Subject: Easy way to determine BIND version remotely?
> >
> >
> >
> >Is there a straightforward way to see either or both of
> >the BIND version, or other DNS software version that a
> >particular DNS server is running, if I don't have root
> >access to the machine?
> >
> >Someone mentioned using nslookup for such a query but I
> >can't see anything that gives that kind of information.
> >
> >TIA,
> >
> >
> >Phil
> >
> >
> >--
> >Philip J. Koenig         The Electric Kahuna Organization
> >[anti-spammed]
> >----------------Computers & Communications for the New
> >Millennium-------------
> >* To send email, remove numbers and spaces:  pjkunet64 @  ekahuna27 . com
> >*
> >*
> >*
> >* Expose ORBS for what it is: abuse of the net.
> >*
> >* Simple answers are for simple minds.  Try a new way of looking at things.
> >*
> >
> >
> 
> 
> 
> 
--
Mark Andrews, Nominum Inc.
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: Mark.Andrews at nominum.com