From owner-freebsd-current@FreeBSD.ORG Sat Oct 12 18:18:06 2013 Return-Path: Delivered-To: freebsd-current@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTP id 3AB423C5 for ; Sat, 12 Oct 2013 18:18:06 +0000 (UTC) (envelope-from freebsd@allanjude.com) Received: from mx1.scaleengine.net (beauharnois2.bhs1.scaleengine.net [142.4.218.15]) by mx1.freebsd.org (Postfix) with ESMTP id 17CB92A3D for ; Sat, 12 Oct 2013 18:18:05 +0000 (UTC) Received: from [192.168.1.105] (S01060015e9b562c7.hm.shawcable.net [50.70.17.171]) (Authenticated sender: roleaccount@scaleengine.com) by mx1.scaleengine.net (Postfix) with ESMTPSA id B168031F31 for ; Sat, 12 Oct 2013 18:18:04 +0000 (UTC) Message-ID: <5259925C.4030709@allanjude.com> Date: Sat, 12 Oct 2013 14:18:04 -0400 From: Allan Jude User-Agent: Mozilla/5.0 (Windows NT 6.2; WOW64; rv:17.0) Gecko/20130801 Thunderbird/17.0.8 MIME-Version: 1.0 To: freebsd-current@freebsd.org Subject: Re: May you please add alias for nslookup? References: <201310121634.r9CGYQRD053340@fire.js.berklix.net> In-Reply-To: <201310121634.r9CGYQRD053340@fire.js.berklix.net> Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 12 Oct 2013 18:18:06 -0000 On 2013-10-12 12:34, Julian H. Stacey wrote: > RW wrote: >> On Sat, 12 Oct 2013 10:44:56 +0200 >> Ivan Voras wrote: >> >>> explaning the user what has happened and optionally invoking "host" >>> or "dig". >> Actually dig has gone > Rather cryptic for me so I looked: > > dig has gone from current src/usr.bin/dig > nslookup & dig & host > are all installed by either of current > ports/dns/bind99 or ports/dns/bind-tools > > >> and has been replaced by the unbound utility >> drill. > src/usr.bin/drill/ > > > I agree with O.P. Zhifeng Hu's "this is a very basic tools". > > Removing src/contrib/bind9 from FreeBSD-10 will get criticised as: > "Calls itself a server OS, but no name server out of the box!" > > Please resist periodic urges to strip src/ towards just a tool set > capable of rebuilding itself. Tossing expected tools (even if a > port is more up to date & secure) will annoy users, & potential > immigrants from other Unixes may try then toss FreeBSD. > > Cheers, > Julian It is easier to keep bind up to date from ports. If you want DNSSEC support in 9, you have to replace the bind in base anyway.... bind is replaced with unbound, which providers most of the functionality required in most instances. I forget the exact numbers, but when I looked about 20 of the security advisories over the last 10 years have been because of bind. That is over 12% of all vulnerabilities. -- -- Allan Jude