[34082] in North American Network Operators' Group
Re: sorry to ruin several of your evenings...
daemon@ATHENA.MIT.EDU (Jay R. Ashworth)
Sat Jan 27 21:40:42 2001
Message-ID: <20010127213422.15291@scfn.thpl.lib.fl.us>
Date: Sat, 27 Jan 2001 21:34:22 -0500
From: "Jay R. Ashworth" <jra@baylink.com>
To: nanog@merit.edu
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
In-Reply-To: <20010127194623.D75292@og.latency.net>; from Adam Rothschild <asr@latency.net> on Sat, Jan 27, 2001 at 07:46:23PM -0500
Errors-To: owner-nanog-outgoing@merit.edu
On Sat, Jan 27, 2001 at 07:46:23PM -0500, Adam Rothschild wrote:
> On Fri, Jan 26, 2001 at 09:47:08PM -0800, Paul A Vixie wrote:
> > ...but this one's important.
> > Several serious security holes plugged.
>
> Not to disrespect Mr. Vixie, or detract from the operational content
> of the original post, but I'd like to recommend another solution to
> these recently reported security holes in BIND: install djbdns
> <http://www.djbdns.org/>.
Or DENTS <http://sourceforge.net/projects/dents/>, created by the
Mindspring technical team, spearheaded by Todd Lewis, whom I think is
hearabouts.
Certainly there are many approaches to DNS, and as several people have
mentioned this month, genetic diversity in service provision, especially
DNS, and most especially Root DNS, is A Good Thing.
Thanks, though, to Paul for the heads up; I'd missed the announcement
through other channels, and I'm pretty sure at least one breakin in
my last 6 months came through a BIND hole.
Cheers,
-- jra
--
Jay R. Ashworth jra@baylink.com
Member of the Technical Staff Baylink
The Suncoast Freenet The Things I Think
Tampa Bay, Florida http://baylink.pitas.com +1 727 804 5015
