From owner-freebsd-stable@FreeBSD.ORG  Thu Jan  7 23:16:45 2010
Return-Path: <owner-freebsd-stable@FreeBSD.ORG>
Delivered-To: freebsd-stable@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 0DCD91065670
	for <freebsd-stable@freebsd.org>; Thu,  7 Jan 2010 23:16:45 +0000 (UTC)
	(envelope-from dougb@FreeBSD.org)
Received: from mail2.fluidhosting.com (mx21.fluidhosting.com [204.14.89.4])
	by mx1.freebsd.org (Postfix) with ESMTP id 934F48FC15
	for <freebsd-stable@freebsd.org>; Thu,  7 Jan 2010 23:16:44 +0000 (UTC)
Received: (qmail 5022 invoked by uid 399); 7 Jan 2010 23:16:43 -0000
Received: from localhost (HELO foreign.dougb.net)
	(dougb@dougbarton.us@127.0.0.1)
	by localhost with ESMTPAM; 7 Jan 2010 23:16:43 -0000
X-Originating-IP: 127.0.0.1
X-Sender: dougb@dougbarton.us
Message-ID: <4B466B5B.6060009@FreeBSD.org>
Date: Thu, 07 Jan 2010 15:16:43 -0800
From: Doug Barton <dougb@FreeBSD.org>
Organization: http://SupersetSolutions.com/
User-Agent: Thunderbird 2.0.0.23 (X11/20091206)
MIME-Version: 1.0
To: Thomas Rasmussen <thomas@gibfest.dk>
References: <20100106235655.BA25C1CC0B@ptavv.es.net>
	<4B452BC9.1040104@gibfest.dk>
In-Reply-To: <4B452BC9.1040104@gibfest.dk>
X-Enigmail-Version: 0.96.0
OpenPGP: id=D5B2F0FB
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Cc: freebsd-stable@freebsd.org
Subject: Re: FreeBSD Security Advisory FreeBSD-SA-10:01.bind
X-BeenThere: freebsd-stable@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Production branch of FreeBSD source code <freebsd-stable.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-stable>, 
	<mailto:freebsd-stable-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-stable>
List-Post: <mailto:freebsd-stable@freebsd.org>
List-Help: <mailto:freebsd-stable-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-stable>,
	<mailto:freebsd-stable-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 07 Jan 2010 23:16:45 -0000

Thomas Rasmussen wrote:
> Hello,
> 
> While this is all true, this vulnerability is for caching servers,
> not authorative ones. It is pretty easy to setup DLV validation on a
> recursive bind server. However, it is not enabled by default on FreeBSD,
> so Stephen should be safe.

FWIW, I agree with Thomas.

-- 

	Improve the effectiveness of your Internet presence with
	a domain name makeover!    http://SupersetSolutions.com/

	Computers are useless. They can only give you answers.
			-- Pablo Picasso