From owner-freebsd-isp@FreeBSD.ORG  Wed Sep 17 14:46:05 2003
Return-Path: <owner-freebsd-isp@FreeBSD.ORG>
Delivered-To: freebsd-isp@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 6DFF916A4B3
	for <freebsd-isp@freebsd.org>; Wed, 17 Sep 2003 14:46:05 -0700 (PDT)
Received: from webmail.akwireless.net (webmail.akwireless.net
	[192.189.218.15])
	by mx1.FreeBSD.org (Postfix) with SMTP id 5B9B943FAF
	for <freebsd-isp@freebsd.org>; Wed, 17 Sep 2003 14:46:04 -0700 (PDT)
	(envelope-from dee@akwireless.net)
Received: (qmail 4844 invoked from network); 17 Sep 2003 21:46:03 -0000
Received: from unknown (HELO 192.168.0.3) (127.0.0.1)
  by 0 with SMTP; 17 Sep 2003 21:46:03 -0000
From: "W.D. McKinney" <dee@akwireless.net>
To: freebsd-isp@freebsd.org
In-Reply-To: <48322287.20030917233959@blue.calx.nl>
References: <20030917081828.GC43577@mccaffrey.house.so14k.com>
	<48322287.20030917233959@blue.calx.nl>
Content-Type: text/plain
Organization: 
Message-Id: <1063835258.6538.245.camel@papa.wdm.com>
Mime-Version: 1.0
X-Mailer: Ximian Evolution 1.2.3 
Date: 17 Sep 2003 13:47:38 -0800
Content-Transfer-Encoding: 7bit
Subject: Re: Re[2]: Verisign fun.
X-BeenThere: freebsd-isp@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Internet Services Providers <freebsd-isp.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-isp>,
	<mailto:freebsd-isp-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-isp>
List-Post: <mailto:freebsd-isp@freebsd.org>
List-Help: <mailto:freebsd-isp-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-isp>,
	<mailto:freebsd-isp-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 17 Sep 2003 21:46:05 -0000

I saw that on the ISC bind9-users list also. We have moved off our bind9
servers to djbdns a couple days agao and there are patches for that
version also, but we have decided to let the dust settle as impact is
minimal right now.

I always say, "Only the experienced walk with a limp."

Dee


On Wed, 2003-09-17 at 13:39, Walter Hop wrote:
> [in reply to secabeen@pobox.com, 17-9-2003]
> 
> >> I don't know about you guys but the verisign redirecting all
> >> unregistered .com/.net domains is annoying. Someone pointed this out to
> >> me.
> >>
> >> http://achurch.org/bind-verisign-patch.html
> >
> > If you want to do something like this, here's the official ISC patch:
> >
> > http://www.isc.org/products/BIND/delegation-only.html
> 
> If you do this patch, test it carefully. I have had serious resolution
> problems with the patch on FreeBSD 4.8, and somebody else on bind9-users
> with Solaris had the same.
> 
> Unless you host applications or networks that break, I would suggest
> waiting a few days to see if an updated version becomes available.
> 
> I am nullrouting the IP addresses of Verisign's spam webservers for now.
> 
> cheers,
> walter