From owner-freebsd-questions@FreeBSD.ORG Wed Mar 18 17:14:44 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 23588469 for ; Wed, 18 Mar 2015 17:14:44 +0000 (UTC) Received: from mail-lb0-x229.google.com (mail-lb0-x229.google.com [IPv6:2a00:1450:4010:c04::229]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 97039AEB for ; Wed, 18 Mar 2015 17:14:43 +0000 (UTC) Received: by lbblx11 with SMTP id lx11so12535566lbb.3 for ; Wed, 18 Mar 2015 10:14:41 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=wBh7Q9TqpAaM3Aa2AaRUqyo5/MtBHcuKXBN4QKj54Hw=; b=IxRIQ5fZg34mHm28gptttNnKG6MJYcJOdnIP7PSPpH00qyb1jcbYgJwOIjY8jkKAYm BdKXW1h6eVZFrjWEf3rkFBg5ZuB/z7045s6IFE3GX4imZeUh/rquHNwIr8lsTQdH4wJi s6QTkwGicCigmiLdsZ5mNqC2j+BQ33kckmhEMJlRQfHsKYSD0sNapEaHbpED7wMDWPIh epFEyZ2F83ZeT622xV5xwgebyMBAK+LHk0bfyDV35hwzhcNwc4qsXfhYKvimdtRFXI5Z g9p12Mk4HXL4zQxVfgxCzls+MvHdNrxmQ9t0aW6DkfNXQfEqpApwKz5xzhfnK4qZNgGl gR9w== MIME-Version: 1.0 X-Received: by 10.152.5.6 with SMTP id o6mr66335069lao.59.1426698881409; Wed, 18 Mar 2015 10:14:41 -0700 (PDT) Received: by 10.25.212.1 with HTTP; Wed, 18 Mar 2015 10:14:41 -0700 (PDT) In-Reply-To: <55099EE3.9030308@hiwaay.net> References: <5508B8EB.3050907@gmail.com> <55099EE3.9030308@hiwaay.net> Date: Wed, 18 Mar 2015 10:14:41 -0700 Message-ID: Subject: Re: FreeBSD recommends not using base unbound for an authoritative server From: Chris Stankevitz To: "William A. Mahaffey III" Content-Type: text/plain; charset=UTF-8 Cc: freebsd-questions X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 18 Mar 2015 17:14:44 -0000 On Wed, Mar 18, 2015 at 8:50 AM, William A. Mahaffey III wrote: >> Thank you for your reply. Are you referring to security? Is this the >> is a correct interpretation of what you are saying: >> >> "In general, the FreeBSD base software is untrustworthy because it is >> infrequently updated. Someone who is interested in security should >> avoid the FreeBSD base packages and use ports wherever possible." >> >> Thank you, >> >> Chris > > > > Is that a quote from some (online ?) source ? If so, where ? If not, have a > nice day :-) .... William I made up the quote in an attempt to figure out what "Jungle Boogie" was trying to say. I am not a troll or blogger. I assure you my only goal is to understand why the FreeBSD manual is telling me not to run the base-provided unbound daemon for outside users. Chris