From owner-freebsd-i386@FreeBSD.ORG Wed Jul 30 14:49:29 2008 Return-Path: Delivered-To: freebsd-i386@hub.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id DCCB11065672; Wed, 30 Jul 2008 14:49:29 +0000 (UTC) (envelope-from gavin@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id D47E28FC1E; Wed, 30 Jul 2008 14:49:29 +0000 (UTC) (envelope-from gavin@FreeBSD.org) Received: from freefall.freebsd.org (gavin@localhost [127.0.0.1]) by freefall.freebsd.org (8.14.2/8.14.2) with ESMTP id m6UEnTG9073931; Wed, 30 Jul 2008 14:49:29 GMT (envelope-from gavin@freefall.freebsd.org) Received: (from gavin@localhost) by freefall.freebsd.org (8.14.2/8.14.1/Submit) id m6UEnTwD073927; Wed, 30 Jul 2008 14:49:29 GMT (envelope-from gavin) Date: Wed, 30 Jul 2008 14:49:29 GMT Message-Id: <200807301449.m6UEnTwD073927@freefall.freebsd.org> To: usman.ahmad@pk.link.net, gavin@FreeBSD.org, freebsd-i386@FreeBSD.org, gavin@FreeBSD.org From: gavin@FreeBSD.org Cc: Subject: Re: i386/126096: bind patch/upgrade X-BeenThere: freebsd-i386@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: I386-specific issues for FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 30 Jul 2008 14:49:30 -0000 Synopsis: bind patch/upgrade State-Changed-From-To: open->closed State-Changed-By: gavin State-Changed-When: Wed Jul 30 14:16:52 UTC 2008 State-Changed-Why: To submitter: Firstly, It appears that you are not running FreeBSD, but BSD/OS 4.2. These are different operating systems, and as a result I do not know how you would go about solving your problems with BIND on BSD/OS. However, I do know that support for BSD/OS stopped in 2004, so you should probably consider moving any BSD/OS servers away from BSD/OS, and not just upgrading BIND on them, as there are likely to be other serious issues with them. If your question is "How can I move these servers onto a secure version of FreeBSD", then that is a hard question to answer without knowing what the servers do. You will find the FreeBSD website and handbook very detailed on how to install and configure FreeBSD, and there is lots of documentation around about how to configure BIND. After you install 7.0-RELEASE you will still need to patch the server before it is secure, but that is easly done with freebsd-update. Also note that the minimum version of BIND that you need to be secure is 9.4.2-P1, and not 9.4.1-P1 as you stated in your question. Hope that helps, Gavin Responsible-Changed-From-To: freebsd-i386->gavin Responsible-Changed-By: gavin Responsible-Changed-When: Wed Jul 30 14:16:52 UTC 2008 Responsible-Changed-Why: Track http://www.freebsd.org/cgi/query-pr.cgi?pr=126096