If I understood the "pay policy" correctly it was mainly directed at those
who want direct access to CVS tree and in-house "code related" resources. I
was also led to understand that updates, patches, new version and the like
would still be available as always.
I could be wrong, but that's what it sounded like to me.
- Bennett
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Herman Van Keer (N)
[M-PRO]
Sent: Friday, February 09, 2001 10:31
Cc: [EMAIL PROTECTED]
Subject: Re: dns security
[EMAIL PROTECTED] wrote:
>
Hi,
I heard some very bad news about bind (in general for bugs [security]
and specifically now with their pay-policy ;-) )
An alternative to bind, could be djbdns... from Dan Bernstein (creator
of qmail).
Has anyone have experience with this DNS server?
Security?
Thanks,
Herman
> Daniel,
>
> #Can anyone give me some hints what security measures I
> #can take to protect my (Linux-) DNS server (maybe lines
> #to add to /etc/named.conf or some online available material)?
>
> If you haven't done it already you will want to harden the Linux box. You
> could use bastille, CBAC, or anything else that was discusses in
> yesterday's(?) thread about securing Linux hosts. On the DNS server you
> will want to use xfernets (BIND 4) or allow-transfer (BIND 8) to limit who
> can do a zone transfer. You also may want to look at using split-DNS.
> This would entail running two primary DNS servers for your domain. One
for
> internal users and one for the Internet. You only have to advertize the
> specific hosts you want the Internet to be able to reach by name. I
> recommend getting the DNS and BIND 3rd Edition by O'Reilly. Chapter ten
is
> on security. You can also find some stuff about security at
> http://www.isc.org/products/BIND/. Hurry up before they start making you
> pay for it=)
>
> Regards,
> Jeffery Gieser
>
> -
> [To unsubscribe, send mail to [EMAIL PROTECTED] with
> "unsubscribe firewalls" in the body of the message.]
--
+----------------------------------------+
! Herman Van Keer !
! Tel: +1 403 863-6075 !
! E-mail: [EMAIL PROTECTED] !
+----------------------------------------+
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
