[Bind 4.9] domain name and CNAME

[phn at icke-reklam.ipsec.nu]

Julien Bordet <zejames at greyhats.org> wrote:

> Jim Reid wrote:

>>>>>>> "Roland" == Roland Verlander <roly2002auSPAMTRAP at yahoo.com.au>
>>>>>>> writes:
>> 
>>     >> I have to configure a bind 4.9.7 on Solaris. Don't ask me to
>>     >> upgrade it : I cannot, it is a production server ;)
>>     Roland> Are you joking?
>>     Roland> http://www.isc.org/products/BIND/bind-security.html If you
>>     Roland> have to use BIND 4 get 4.9.9, but don't use 4.9.7!
>> 
>> So since the OP is going to *have* upgrade, they might as well upgrade
>> to a decent version of BIND, like the current version of BIND9. BIND4
>> is a relic from the Stone Age that deserves to be long dead and buried.

> Yes, we are going to use a Linux with Bind 9.2 as our new DNS server... Of 
> course I knew it was vulnerable, but in big companies, things aren't so 
> easy ...

Why don't you upgrade to whats considered "OK" - bind 9.2.1 or later.
( and why not use *BSD , but thats a minor issue)


> Julien


-- 
Peter Håkanson         
        IPSec  Sverige      ( At Gothenburg Riverside )
           Sorry about my e-mail address, but i'm trying to keep spam out,
	   remove "icke-reklam" if you feel for mailing me. Thanx.