Ack, sorry folks.. I need to finish reading my mail before sending anything out.
-----Original Message----- From: James Miller [mailto:[EMAIL PROTECTED] Sent: Wednesday, September 17, 2003 10:12 AM To: debian-security@lists.debian.org Subject: Verisign and Bind update Will the package maintainers of BIND be integrating the patches from ISC-BIND to negate Verisign's recent shenanigans? --from ISC's web site -- In response to high demand from our users, ISC is releasing a patch for BIND to support the declaration of "delegation-only" zones in caching/recursive name servers. Briefly, a zone which has been declared "delegation-only" will be effectively limited to containing NS RRs for subdomains, but no actual data outside its apex (for example, its SOA RR and apex NS RRset). This can be used to filter out "wildcard" or "synthesized" data from NAT boxes or from authoritative name servers whose undelegated (in-zone) data is of no interest. Example named.conf entry for the zone: zone "foo" { type delegation-only; }; Release Candidates/Patches that support "delegation-only" zones: ->Jim -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]