Date: Thu, 20 Nov 2003 11:30:03 -0600 From: Len Conrad <LConrad@Go2France.com> To: freebsd-isp@freebsd.org Subject: Re: About DNS (BIND) with Database Message-ID: <6.0.1.1.2.20031118084120.08cd68c8@mail.go2france.com> In-Reply-To: <010101c3add0$7c2bbd70$1100a8c0@dtg17> References: <029b01c3ad14$5e53b080$110d3ad4@VAHOXP> <0b3a01c3ad1e$2224d850$1100a8c0@dtg17> <6.0.1.1.2.20031117145927.0486af80@mail.go2france.com> <010101c3add0$7c2bbd70$1100a8c0@dtg17>
next in thread | previous in thread | raw e-mail | index | archive | help
>My apologies if this thread has hit a nerve, I wasn't picking at anyone. I'm >just giving my point of view. And I was giving you mine on your FUD. >The history may be old in terms of computing, but I won't how many >vulnerable systems are still out there? but at this point, running a vulnerable BIND 2 or 3+ years old is not really BIND's fault, nor a reason to recommend against running current BIND8, and esp BIND9 which has NO history of (exploited) vulnerabilities, >System admins that may not even know how to upgrade or even know that the >vulns exist. Then they aren't "sys admins", but jerks. >Plus http://www.isc.org/products/BIND/bind-security.html isn't a very good >track record is it? The charter of ISC is to implement the ALL of RFCs for DNS in BIND8 and 9, so as the RFCs move along, so does BIND, with inevitable bugs. Fixing of the infrequent problems has been extremely fast over the past 3 years. Other DNS software can cherry pick the DNS features they want to (or can) implement and blow off the rest, or push some political agenda. >If people want to use bind or any other package, they do so at their choice. >I'm just saying in my opinion I think there are better alternative. nothing wrong with that, but your reason against choosing BIND, an old security record, was wrong. >If you're happy using bind, use bind. If you're happy with windows 95, use >it. thanks, great advice, the list is grateful. And, if you're happy recommending _against_ something, do it accurately. Trotting out 3+ year old CERT/SANS advisories as reasons for not using current software is BS. Len _____________________________________________________________________ http://MenAndMice.com/DNS-training: Atlanta; Orlando; San Jose IMGate.MEIway.com: anti-spam gateway, effective on 1000's of sites, free
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?6.0.1.1.2.20031118084120.08cd68c8>