onsdagen den 17 september 2003 02.56 skrev Jeremy Kister:
> On Tuesday, September 16, 2003 11:46 AM, Eric Ziegast wrote:
> > dnscache.  Here's a patch for people who use dnscache
> > to preserve the old (uninfected) behavior...
>
> not only for .com, but also .net.
>
> a similar patch exists for BIND v8, although I havent installed it yet.
>
> http://achurch.org/bind-verisign-patch.html
> I hope verisign (and anyone who had anything to do with that silly
> decision) looses the ability to manage the gtld servers for ever.

I have packages for Mandrake Linux (Cooker):

http://www.deserve-it.com/Cooker/SRPMS/bind-9.2.3-0.rc2.1mdk.src.rpm
http://www.deserve-it.com/Cooker/SRPMS/caching-nameserver-9.2-1mdk.src.rpm

http://www.deserve-it.com/Cooker/RPMS/caching-nameserver-9.2-1mdk.noarch.rpm
http://www.deserve-it.com/Cooker/RPMS/bind-9.2.3-0.rc2.1mdk.i586.rpm
http://www.deserve-it.com/Cooker/RPMS/bind-devel-9.2.3-0.rc2.1mdk.i586.rpm
http://www.deserve-it.com/Cooker/RPMS/bind-utils-9.2.3-0.rc2.1mdk.i586.rpm

The changed files are /etc/named.conf in the "caching-nameserver" package, and 
the named.conf files in the bind-* example files.

Here's the change:

[EMAIL PROTECTED] /]# diff -u named.conf named.conf.oden
--- named.conf  2002-09-04 00:00:00.000000000 +0200
+++ named.conf.oden     2003-09-17 15:13:00.000000000 +0200
@@ -38,3 +38,16 @@
        file "named.local";
 };

+// workaround stupid stuff... (OE: Wed 17 Sep 2003)
+zone "ac" { type delegation-only; };
+zone "cc" { type delegation-only; };
+zone "com" { type delegation-only; };
+zone "cx" { type delegation-only; };
+zone "museum" { type delegation-only; };
+zone "net" { type delegation-only; };
+zone "nu" { type delegation-only; };
+zone "ph" { type delegation-only; };
+zone "sh" { type delegation-only; };
+zone "tm" { type delegation-only; };
+zone "ws" { type delegation-only; };
+


This will make a "nslookup asdasdkjhasdkjherinasdasdqef.nu" respond with "** 
server can't find asdasdkjhasdkjherinasdasdqef.nu: NXDOMAIN".

I have fixed the name servers serving 11 full c-class and one 1/4 c-class 
networks and about 3000 hosts/klients. It works great!

-- 
Regards // Oden Eriksson, Deserve-IT.com


Reply via email to