From owner-freebsd-hackers@FreeBSD.ORG  Wed Sep 17 04:18:33 2003
Return-Path: <owner-freebsd-hackers@FreeBSD.ORG>
Delivered-To: freebsd-hackers@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP
	id F0A9F16A4B3; Wed, 17 Sep 2003 04:18:33 -0700 (PDT)
Received: from mx2.fillmore-labs.com (lima.fillmore-labs.com [62.138.193.83])
	by mx1.FreeBSD.org (Postfix) with ESMTP
	id BF8ED43FB1; Wed, 17 Sep 2003 04:18:32 -0700 (PDT)
	(envelope-from eikemeier@fillmore-labs.com)
Received: from pd951ac23.dip.t-dialin.net
	([217.81.172.35] helo=fillmore-labs.com ident=y6sqyoqpc8hnkfu0)
	by mx2.fillmore-labs.com with asmtp (TLSv1:AES256-SHA:256)
	(Exim 4.22)
	id 19zaKL-0007W7-CD; Wed, 17 Sep 2003 13:18:29 +0200
Message-ID: <3F684301.4010506@fillmore-labs.com>
Date: Wed, 17 Sep 2003 13:18:25 +0200
From: Oliver Eikemeier <eikemeier@fillmore-labs.com>
MIME-Version: 1.0
To: Doug Barton <DougB@FreeBSD.org>
References: <3F673E27.29338.6E87ACC@localhost>
	<XFMail.20030916145304.jdp@polstra.com>
	<20030916.175558.10083602.imp@bsdimp.com>
	<20030917025017.M855@znfgre.qbhto.arg>
In-Reply-To: <20030917025017.M855@znfgre.qbhto.arg>
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
X-Authenticated-Sender: eikemeier@fillmore-labs.com
User-Agent: KMail/1.5.9
Organization: Fillmore Labs GmbH  <http://www.fillmore-labs.com/>
X-Complaints-To: abuse@fillmore-labs.com
cc: freebsd-hackers@freebsd.org
cc: cliftonr@lava.net
cc: jdp@polstra.com
Subject: Re: Any workarounds for Verisign .com/.net highjacking?
X-BeenThere: freebsd-hackers@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
Reply-To: freebsd-hackers@freebsd.org
List-Id: Technical Discussions relating to FreeBSD
	<freebsd-hackers.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-hackers>,
	<mailto:freebsd-hackers-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-hackers>
List-Post: <mailto:freebsd-hackers@freebsd.org>
List-Help: <mailto:freebsd-hackers-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-hackers>,
	<mailto:freebsd-hackers-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 17 Sep 2003 11:18:34 -0000

Doug Barton wrote:

> ISC is in the process of releasing patched versions of BIND, which I
> plan to take advantage of. :)
> 
> Doug

Patch to port dns/bind9 to upgrade bind9 to 9.2.2-P1:
<http://www.isc.org/products/BIND/delegation-only.html>

--- bind9.patch begins here ---
diff -u Makefile.orig Makefile
--- Makefile.orig	Sat Sep  6 02:05:46 2003
+++ Makefile	Wed Sep 17 13:06:06 2003
@@ -19,6 +19,11 @@
 MASTER_SITE_SUBDIR=	bind9/${ISCVERSION}
 DISTFILES=	bind-${ISCVERSION}.tar.gz
 
+PATCH_SITES=	${MASTER_SITES}
+PATCH_SITE_SUBDIR=	${MASTER_SITE_SUBDIR}
+PATCHFILES=	patch.9.2.2-P1
+PATCH_DIST_STRIP=	-p1
+
 MAINTAINER=	DougB@FreeBSD.org
 COMMENT=	Completely new version of the BIND DNS server
 
diff -u distinfo.orig distinfo
--- distinfo.orig	Tue Mar  4 10:44:15 2003
+++ distinfo	Wed Sep 17 13:06:14 2003
@@ -1 +1,2 @@
 MD5 (bind-9.2.2.tar.gz) = 6ea7d64a0856893ab3eb541ab7bbc725
+MD5 (patch.9.2.2-P1) = 063edc41c756ffc6a1051d5f1937fa2c
--- bind9.patch ends here ---

put

zone "com" { 
     type delegation-only; 
};

zone "net" { 
     type delegation-only; 
};

in your named.conf:

hasta la vista, 64.94.110.11

Have fun
    Oliver