Blocking version information

Chris Thompson cet1 at
Mon Jun 20 15:08:33 UTC 2005

On Jun 20 2005, Vinny Abello wrote:

> OK, you win. You're completely right. :)
> As much as I'd like to go back and forth with this as I'm laughing 
> reading some of your responses, I simply don't have the time on or 
> off list so as it stands, Brad is correct. I withdraw all my 
> statements. Listen to him and everyone that agrees with him.
> ;)

It's amazing how much heat and light is generated by what is a supremely
marginal issue.

I can't help feeling that Mr Dickinson was pulling our legs when he asked
whether it "would violate any DNS RFCs" to obscure the BIND version. 
We would need the RFC that forbids use of any nameserver software other
than BIND first. [Needs to be written for 1 April 2006, I think.]

As for best current practice, what better sample than the root nameservers?  "VGRS2"  "8.4.1-REL"  "8.4.6-REL"  "8.4.4"  "9.2.3"  "9.3.1"  (returned SERVFAIL)  "8.4.6-REL"  "contact info at"  "VGRS2"  "NSD 1.2.4"  "named-8.4.1"  "8.4.6-REL"

Make what you will of that...

Chris Thompson
Email: cet1 at

More information about the bind-users mailing list