From owner-freebsd-questions@FreeBSD.ORG Thu May 22 22:21:22 2008 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 059981065674 for ; Thu, 22 May 2008 22:21:22 +0000 (UTC) (envelope-from cswiger@mac.com) Received: from mail-out3.apple.com (mail-out3.apple.com [17.254.13.22]) by mx1.freebsd.org (Postfix) with ESMTP id DC7078FC21 for ; Thu, 22 May 2008 22:21:21 +0000 (UTC) (envelope-from cswiger@mac.com) Received: from relay14.apple.com (relay14.apple.com [17.128.113.52]) by mail-out3.apple.com (Postfix) with ESMTP id D1F622C8ED1E; Thu, 22 May 2008 15:21:21 -0700 (PDT) Received: from relay14.apple.com (unknown [127.0.0.1]) by relay14.apple.com (Symantec Mail Security) with ESMTP id BAD202FB8002; Thu, 22 May 2008 15:21:21 -0700 (PDT) X-AuditID: 11807134-a9ecfbb000000ed7-55-4835f1e18406 Received: from cswiger1.apple.com (cswiger1.apple.com [17.227.140.124]) by relay14.apple.com (Apple SCV relay) with ESMTP id 99DB12F18001; Thu, 22 May 2008 15:21:21 -0700 (PDT) Message-Id: <76B8A6DC-8CB4-46A4-9588-A6941080A942@mac.com> From: Chuck Swiger To: Jonathan Chen In-Reply-To: <20080522203932.GA74897@osiris.chen.org.nz> Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes Content-Transfer-Encoding: 7bit Mime-Version: 1.0 (Apple Message framework v919.2) Date: Thu, 22 May 2008 15:21:21 -0700 References: <48345138.8080507@ibctech.ca> <4834599A.1090108@infracaninophile.co.uk> <4834A7B4.9030302@ibctech.ca> <20080521232319.GA57359@osiris.chen.org.nz> <4834B7EE.3000002@ibctech.ca> <20080522020619.GA69543@osiris.chen.org.nz> <4834D891.6050707@ibctech.ca> <20080522035913.GA78449@osiris.chen.org.nz> <483503AD.60801@infracaninophile.co.uk> <4835634F.6060107@ibctech.ca> <20080522203932.GA74897@osiris.chen.org.nz> X-Mailer: Apple Mail (2.919.2) X-Brightmail-Tracker: AAAAAA== Cc: FreeBSD Questions Subject: Re: Multiple instances of BIND at startup X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 22 May 2008 22:21:22 -0000 On May 22, 2008, at 1:39 PM, Jonathan Chen wrote: [ ... ] > If this were true, the "view" feature would be broken. I've just tried > this with a client-based ACL, and there doesn't appear to any > cache-leaking across views. Any counter-examples would be welcome. Well, BIND is up to 28 published security advisories: http://www.isc.org/sw/bind/bind-security.php#matrix ...which not only have included cache poisoning (2003-0914), but many of them allowed for arbitrary code execution, often as root. -- -Chuck