From owner-freebsd-current@FreeBSD.ORG Sat Oct 12 18:25:13 2013 Return-Path: Delivered-To: freebsd-current@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTP id B95A473E for ; Sat, 12 Oct 2013 18:25:13 +0000 (UTC) (envelope-from freebsd@allanjude.com) Received: from mx1.scaleengine.net (beauharnois2.bhs1.scaleengine.net [142.4.218.15]) by mx1.freebsd.org (Postfix) with ESMTP id 967112AA1 for ; Sat, 12 Oct 2013 18:25:12 +0000 (UTC) Received: from [192.168.1.105] (S01060015e9b562c7.hm.shawcable.net [50.70.17.171]) (Authenticated sender: roleaccount@scaleengine.com) by mx1.scaleengine.net (Postfix) with ESMTPSA id D101731F5E for ; Sat, 12 Oct 2013 18:25:11 +0000 (UTC) Message-ID: <52599408.7060306@allanjude.com> Date: Sat, 12 Oct 2013 14:25:12 -0400 From: Allan Jude User-Agent: Mozilla/5.0 (Windows NT 6.2; WOW64; rv:17.0) Gecko/20130801 Thunderbird/17.0.8 MIME-Version: 1.0 To: freebsd-current@freebsd.org Subject: Re: May you please add alias for nslookup? References: <201310121634.r9CGYQRD053340@fire.js.berklix.net> <5259925C.4030709@allanjude.com> In-Reply-To: <5259925C.4030709@allanjude.com> Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 12 Oct 2013 18:25:13 -0000 On 2013-10-12 14:18, Allan Jude wrote: > On 2013-10-12 12:34, Julian H. Stacey wrote: >> RW wrote: >>> On Sat, 12 Oct 2013 10:44:56 +0200 >>> Ivan Voras wrote: >>> >>>> explaning the user what has happened and optionally invoking "host" >>>> or "dig". >>> Actually dig has gone >> Rather cryptic for me so I looked: >> >> dig has gone from current src/usr.bin/dig >> nslookup & dig & host >> are all installed by either of current >> ports/dns/bind99 or ports/dns/bind-tools >> >> >>> and has been replaced by the unbound utility >>> drill. >> src/usr.bin/drill/ >> >> >> I agree with O.P. Zhifeng Hu's "this is a very basic tools". >> >> Removing src/contrib/bind9 from FreeBSD-10 will get criticised as: >> "Calls itself a server OS, but no name server out of the box!" >> >> Please resist periodic urges to strip src/ towards just a tool set >> capable of rebuilding itself. Tossing expected tools (even if a >> port is more up to date & secure) will annoy users, & potential >> immigrants from other Unixes may try then toss FreeBSD. >> >> Cheers, >> Julian > It is easier to keep bind up to date from ports. If you want DNSSEC > support in 9, you have to replace the bind in base anyway.... > > bind is replaced with unbound, which providers most of the functionality > required in most instances. > > I forget the exact numbers, but when I looked about 20 of the security > advisories over the last 10 years have been because of bind. That is > over 12% of all vulnerabilities. > des@'s blog adds another important point, bind10 required python. FreeBSD doesn't want to ship with python in base, so keeping bind wasn't really an option