Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 26 Mar 2001 21:39:30 -0500
From:      Peter Radcliffe <pir@pir.net>
To:        freebsd-security@FreeBSD.ORG
Subject:   Re: SSHD revelaing too much information.
Message-ID:  <20010326213930.B15891@pir.net>
In-Reply-To: <Pine.NEB.3.96L.1010326205118.81313D-100000@fledge.watson.org>; from rwatson@FreeBSD.ORG on Mon, Mar 26, 2001 at 09:30:55PM -0500
References:  <20010326133953.E7234@xor.obsecurity.org> <Pine.NEB.3.96L.1010326205118.81313D-100000@fledge.watson.org>

next in thread | previous in thread | raw e-mail | index | archive | help
Robert Watson <rwatson@FreeBSD.ORG> probably said:
> Note that BIND used to require recompiling its version string, but
> now allows it to be changed using run-time parameters.

For as long as I can remember (read; as long as I've been doing it)
you've been able to block BIND from giving out it's version number
without recompiling by creating a chaos/bind zone and adding a query
acl.

P.

-- 
pir                  pir@pir.net                    pir@net.tufts.edu


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010326213930.B15891>