From owner-freebsd-doc@FreeBSD.ORG Thu Feb 3 11:40:29 2005 Return-Path: Delivered-To: freebsd-doc@hub.freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 047DC16A4CF for ; Thu, 3 Feb 2005 11:40:29 +0000 (GMT) Received: from freefall.freebsd.org (freefall.freebsd.org [216.136.204.21]) by mx1.FreeBSD.org (Postfix) with ESMTP id B8CCA43D45 for ; Thu, 3 Feb 2005 11:40:28 +0000 (GMT) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1]) by freefall.freebsd.org (8.13.1/8.13.1) with ESMTP id j13BeSoP058905 for ; Thu, 3 Feb 2005 11:40:28 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.13.1/8.13.1/Submit) id j13BeSQ3058904; Thu, 3 Feb 2005 11:40:28 GMT (envelope-from gnats) Resent-Date: Thu, 3 Feb 2005 11:40:28 GMT Resent-Message-Id: <200502031140.j13BeSQ3058904@freefall.freebsd.org> Resent-From: FreeBSD-gnats-submit@FreeBSD.org (GNATS Filer) Resent-To: freebsd-doc@FreeBSD.org Resent-Reply-To: FreeBSD-gnats-submit@FreeBSD.org, Brad Davis Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 4B10716A4CE for ; Thu, 3 Feb 2005 11:32:18 +0000 (GMT) Received: from ender.liquidneon.com (ender.liquidneon.com [64.78.150.163]) by mx1.FreeBSD.org (Postfix) with ESMTP id EECA043D66 for ; Thu, 3 Feb 2005 11:32:17 +0000 (GMT) (envelope-from bdavis@house.so14k.com) Received: from localhost (localhost [127.0.0.1]) by ender.liquidneon.com (Postfix) with ESMTP id 10FFA4407 for ; Thu, 3 Feb 2005 04:32:17 -0700 (MST) Received: from ender.liquidneon.com ([127.0.0.1]) by localhost (ender.liquidneon.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 80950-06 for ; Thu, 3 Feb 2005 04:32:16 -0700 (MST) Received: from mccaffrey.house.so14k.com (gw.house.so14k.com [216.87.87.128]) by ender.liquidneon.com (Postfix) with ESMTP id 9BC7D43E4 for ; Thu, 3 Feb 2005 04:32:16 -0700 (MST) Received: by mccaffrey.house.so14k.com (Postfix, from userid 1001) id 60664F5F; Thu, 3 Feb 2005 04:32:16 -0700 (MST) Message-Id: <20050203113216.60664F5F@mccaffrey.house.so14k.com> Date: Thu, 3 Feb 2005 04:32:16 -0700 (MST) From: Brad Davis To: FreeBSD-gnats-submit@FreeBSD.org X-Send-Pr-Version: 3.113 Subject: docs/77058: Add note to the effect that security by obscurity is not security. X-BeenThere: freebsd-doc@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list Reply-To: Brad Davis List-Id: Documentation project List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 03 Feb 2005 11:40:29 -0000 >Number: 77058 >Category: docs >Synopsis: Add note to the effect that security by obscurity is not security. >Confidential: no >Severity: non-critical >Priority: low >Responsible: freebsd-doc >State: open >Quarter: >Keywords: >Date-Required: >Class: doc-bug >Submitter-Id: current-users >Arrival-Date: Thu Feb 03 11:40:28 GMT 2005 >Closed-Date: >Last-Modified: >Originator: Brad Davis >Release: FreeBSD 4.10-STABLE i386 >Organization: >Environment: System: FreeBSD mccaffrey.house.so14k.com 4.10-STABLE FreeBSD 4.10-STABLE #0: Fri May 28 08:02:41 MDT 2004 root@mccaffrey.house.so14k.com:/usr/obj/usr/src/sys/MCCAFFREY i386 >Description: Add note to the effect that security by obscurity is not security. >How-To-Repeat: >Fix: --- doc-ori/en_US.ISO8859-1/books/handbook/network-servers/chapter.sgml Thu Feb 3 04:20:21 2005 +++ doc/en_US.ISO8859-1/books/handbook/network-servers/chapter.sgml Thu Feb 3 04:28:32 2005 @@ -4177,9 +4177,16 @@ Permitting version lookups on the DNS server could be opening the doors for an attacker. A malicious user may use this information to hunt up known - exploits or bugs to utilize against the host. A false version - string can be placed the options section of - named.conf: + exploits or bugs to utilize against the host. + + + This will not protect you from exploits. Only upgrading to a + version that is not vunerable will protect your server. + + + A false version string can be placed the + options section of + named.conf: options { directory "/etc/namedb";A >Release-Note: >Audit-Trail: >Unformatted: