auotmatic updates

[Mark_Andrews at isc.org]

> I was running BIND 8.2 on Solaris.  I recently changed the machine (still Sol
> aris) and upgraded to BIND 9.1.2.
> 
> Before I was getting "denied update" in the security logs.
> Now I am getting "unapproved update" in the security logs.

	Well you are *not* running BIND 9.1.2.

	"unapproved update" is BIND 4 and BIND 8 < 8.2.3 ****
	"denied update" is BIND 8 >= 8.2.3
	"update denied" is BIND 9

	Did you {re}-install a Solaris patch?
	/usr/local/sbin/named is the default install location for named
	in BIND 9.

	*** BIND 4 and BIND 8 < 8.2.3 contain well known security flaws
	and you should not run unpatched versions.  See
	http://www.isc.org/products/BIND/bind-security.html

	Mark
> 
> I copied and am using the files named.conf and all the zone files from the ol
> d system on the new one.
> Can anyone tell me what the difference is in the versions and why BIND 9 is a
> llowing these updates
> I don't want it to allow?
> 
> Thankx,
> Kurt Shaffer
> 
> 
> 
--
Mark Andrews, Internet Software Consortium
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: Mark.Andrews at isc.org