hiding the version of bind.....

[Sergey Nikolaev]

Another approach to this could be:

put this into your named.conf

view "bind" CHAOS {
        zone "." {
                type hint;
                file "/dev/null";
        };

        match-clients { any; };
        recursion no;
        allow-query { internalnets; };

        zone "bind" CH {
                type master;
                file "primary/bind";
                allow-query { internalnets; };
                allow-transfer { none; };
        };
};

Where internalnets is whatever nets you might want to allow to see
version
number. (You will have to put your current zones into a view too if they
are not yet).

The file "primary/bind" is here

$ORIGIN bind.
@       1D      CH      SOA     localhost. root.localhost. (
                                2001020500      ; serial
                                3H      ; refresh
                                1H      ; retry
                                1W      ; expiry
                                1D )    ; minimum
                CH      NS      localhost.
version         CH      TXT     9.1.0
; EOF

Reference: http://www.pgci.ca/p_bind.html.


Sergey

Bert Nakagawa wrote:
> 
> Hi all,
> 
> how do i prevent users from knowing the version of bind that i'm
> running?  if i run dig @mynameserver .......version.bind i receive the
> version that i'm running.  i want to hide this from the public.
> 
> tia, bert 8)