Date: Fri, 19 Sep 2003 16:19:03 -0400 From: Andrew J Caines <A.J.Caines@halplant.com> To: roam@FreeBSD.org Cc: FreeBSD ports <FreeBSD-Ports@FreeBSD.org> Subject: Patch for djbdns-1.05 to avoid Verisign DNS abuse Message-ID: <20030919201903.GJ5280@hal9000.halplant.com>
next in thread | raw e-mail | index | archive | help
The patch on tinydns.org[1] applies cleanly and works as advertised: Before: # nslookup hnr4wy54uy6hteasy54u65ej.com Server: localhost Address: 127.0.0.1 Non-authoritative answer: Name: hnr4wy54uy6hteasy54u65ej.com Address: 64.94.110.11 After: # nslookup hnr4wy54uy6hteasy54u65ej.com Server: localhost Address: 127.0.0.1 *** No address (A) records available for hnr4wy54uy6hteasy54u65ej.com To fix the records pointing to the Verisign IP: # echo 64.94.110.11 > /service/dnscache/root/ignoreip # svc -t /service/dnscache I extracted the patch from the page[1] and put it in files/patch-ignoreip2 and ran the above by hand. I considered trying to patch the port, but was unable to resolve issues such as at what stage to create the ignoreip, where to reliably locate the service directory and what the relevant service names would be (eg. There are references to dnscache as "D" as well as "dnscache"). Also, the service stuff is in the daemontools port. So, to DIY for (at least) dnscache, this should do the trick: # cd /usr/ports/dns/djbdns # fetch -o files/patch-ignoreip2 http://tinydns.org/djbdns-1.05-ignoreip2.patch # make # SERVICE=/service/dnscache # Adjust accordingly # echo 64.94.110.11 > $SERVICE/root/ignoreip # svc -d $SERVICE # make reinstall # svc -u $SERVICE [1] http://tinydns.org/djbdns-1.05-ignoreip2.patch -Andrew- -- _______________________________________________________________________ | -Andrew J. Caines- Unix Systems Engineer A.J.Caines@halplant.com | | "They that can give up essential liberty to obtain a little temporary | | safety deserve neither liberty nor safety" - Benjamin Franklin, 1759 |
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20030919201903.GJ5280>