Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 17 Sep 2003 13:18:25 +0200
From:      Oliver Eikemeier <eikemeier@fillmore-labs.com>
To:        Doug Barton <DougB@FreeBSD.org>
Cc:        jdp@polstra.com
Subject:   Re: Any workarounds for Verisign .com/.net highjacking?
Message-ID:  <3F684301.4010506@fillmore-labs.com>
In-Reply-To: <20030917025017.M855@znfgre.qbhto.arg>
References:  <3F673E27.29338.6E87ACC@localhost> <XFMail.20030916145304.jdp@polstra.com> <20030916.175558.10083602.imp@bsdimp.com> <20030917025017.M855@znfgre.qbhto.arg>

next in thread | previous in thread | raw e-mail | index | archive | help
Doug Barton wrote:

> ISC is in the process of releasing patched versions of BIND, which I
> plan to take advantage of. :)
> 
> Doug

Patch to port dns/bind9 to upgrade bind9 to 9.2.2-P1:
<http://www.isc.org/products/BIND/delegation-only.html>;

--- bind9.patch begins here ---
diff -u Makefile.orig Makefile
--- Makefile.orig	Sat Sep  6 02:05:46 2003
+++ Makefile	Wed Sep 17 13:06:06 2003
@@ -19,6 +19,11 @@
 MASTER_SITE_SUBDIR=	bind9/${ISCVERSION}
 DISTFILES=	bind-${ISCVERSION}.tar.gz
 
+PATCH_SITES=	${MASTER_SITES}
+PATCH_SITE_SUBDIR=	${MASTER_SITE_SUBDIR}
+PATCHFILES=	patch.9.2.2-P1
+PATCH_DIST_STRIP=	-p1
+
 MAINTAINER=	DougB@FreeBSD.org
 COMMENT=	Completely new version of the BIND DNS server
 
diff -u distinfo.orig distinfo
--- distinfo.orig	Tue Mar  4 10:44:15 2003
+++ distinfo	Wed Sep 17 13:06:14 2003
@@ -1 +1,2 @@
 MD5 (bind-9.2.2.tar.gz) = 6ea7d64a0856893ab3eb541ab7bbc725
+MD5 (patch.9.2.2-P1) = 063edc41c756ffc6a1051d5f1937fa2c
--- bind9.patch ends here ---

put

zone "com" { 
     type delegation-only; 
};

zone "net" { 
     type delegation-only; 
};

in your named.conf:

hasta la vista, 64.94.110.11

Have fun
    Oliver




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3F684301.4010506>