Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 18 Nov 2011 11:48:28 -0800
From:      Doug Barton <dougb@FreeBSD.org>
To:        "Luchesar V. ILIEV" <luchesar.iliev@gmail.com>
Cc:        Christer Solskogen <christer.solskogen@gmail.com>, Albert Thiel <athiel@yourdatacenter.com>, freebsd-ports@freebsd.org
Subject:   Re: BIND 9 question
Message-ID:  <4EC6B68C.1060706@FreeBSD.org>
In-Reply-To: <4EC66620.5010308@gmail.com>
References:  <def678a8e5d54a3e8bd3f3c739c59bc9.athiel@yourdatacenter.com> <4EC57AA2.9000104@FreeBSD.org> <CAMVU60aNZkjPRsuXrfpjyZtQD7TYkxXZx9UMEg=HG4=oNs75Gg@mail.gmail.com> <4EC66620.5010308@gmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On 11/18/2011 06:05, Luchesar V. ILIEV wrote:
> On 18/11/2011 15:48, Christer Solskogen wrote:
>> On Thu, Nov 17, 2011 at 10:20 PM, Doug Barton <dougb@freebsd.org> wrote:
>>> The ports, 10-current, stable/8 and stable/7 were all updated yesterday
>>> shortly after ISC publicly released the code.
>>
>> But not releng/*?

I cannot emphasize this point highly enough: The BIND in the base is
intended primarily for use as a local resolver. If you are doing
serious, mission-critical work with BIND you should be using a port,
preferably dns/bind98. The ability to quickly update in the event of a
security issue is one reason, another is the ability to use the same
version of BIND across your network regardless of the underlying version
of FreeBSD.

If you are in any way worried that your flavor of FreeBSD isn't being
upgraded soon enough, you are (by definition) in the category that
should be using BIND from ports instead.


hth,

Doug

-- 

		"We could put the whole Internet into a book."
		"Too practical."

	Breadth of IT experience, and depth of knowledge in the DNS.
	Yours for the right price.  :)  http://SupersetSolutions.com/




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4EC6B68C.1060706>