From owner-cvs-all Sat Apr 21 12: 5:28 2001 Delivered-To: cvs-all@freebsd.org Received: from Awfulhak.org (awfulhak.demon.co.uk [194.222.196.252]) by hub.freebsd.org (Postfix) with ESMTP id 4025537B42C; Sat, 21 Apr 2001 12:05:19 -0700 (PDT) (envelope-from brian@Awfulhak.org) Received: from hak.lan.Awfulhak.org (root@hak.lan.Awfulhak.org [172.16.0.12]) by Awfulhak.org (8.11.3/8.11.3) with ESMTP id f3LJ6bb79764; Sat, 21 Apr 2001 20:06:37 +0100 (BST) (envelope-from brian@lan.Awfulhak.org) Received: from hak.lan.Awfulhak.org (brian@localhost [127.0.0.1]) by hak.lan.Awfulhak.org (8.11.3/8.11.3) with ESMTP id f3LJ5Q547511; Sat, 21 Apr 2001 20:05:26 +0100 (BST) (envelope-from brian@hak.lan.Awfulhak.org) Message-Id: <200104211905.f3LJ5Q547511@hak.lan.Awfulhak.org> X-Mailer: exmh version 2.3.1 01/18/2001 with nmh-1.0.4 To: Dirk Froemberg Cc: Brian Somers , cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org, brian@Awfulhak.org Subject: Re: cvs commit: src/etc security In-Reply-To: Message from Dirk Froemberg of "Sat, 21 Apr 2001 18:02:13 +0200." <20010421180213.A14503@physik.TU-Berlin.DE> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Date: Sat, 21 Apr 2001 20:05:26 +0100 From: Brian Somers Sender: owner-cvs-all@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG > Hi Brian! > > On Fri, Apr 20, 2001 at 08:39:02PM +0100, Brian Somers wrote: > > > The attached script generates some like: > > > > > > [...] > > > Checking for denied zone transfers (AXFR and IXFR): > > > 478 0.168.192.in-addr.arpa from 192.168.0.55 > > > 3 gibtesnicht.de from 23.35.234.2 (hupsala.dumdidum.de) > > > [...] > > > > > > The lines > > > > > > daily_status_named_enable="YES" > > > daily_status_named_logs=3 > > > > > > have to be added to /etc/defaults/periodic.conf. > > > > > > Any objections to committing this? > > > > As long as there's an update to periodic.conf.5 and the old lines > > are nuked in /etc/security at the same time. > > Yes, of course. 8-) > > > Looks good otherwise - although it would be even nicer if it had an > > option to avoid the gethostbyaddr() :-) > > Ok, I'll add another option (daily_status_named_usedns). > > Regards Dirk Excellent ! Thanks. > -- > Dirk Froemberg > > FreeBSD: The Power to Serve! http://www.FreeBSD.org/ -- Brian Don't _EVER_ lose your sense of humour ! To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe cvs-all" in the body of the message