Subject: Re: NetBSD Security Advisory 2006-022: BIND recursive query and SIG query processing
To: Ben Collver <collver@peak.org>
From: Geert Hendrickx <ghen@NetBSD.org>
List: netbsd-users
Date: 09/22/2006 10:04:44
--wRRV7LY7NUeQGEoC
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline

On Fri, Sep 22, 2006 at 09:56:44AM +1000, Daniel Carosone wrote:
> Oops. Sorry about that, and thanks for the heads up.. does anyone know
> offhand what the equivalent older form of this option is, or was it only
> introduced more recently?  If so, we should probably look at upgrading
> 3.0's bind to include the ability to restrict this.  There are plenty of
> other ways to get screwed without it (traffic amplification attacks, at
> least).

NetBSD 3.1 will have an up-to-date BIND (9.3.2).

	Geert

--wRRV7LY7NUeQGEoC
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (NetBSD)

iQEVAwUBRROZHILS9urEu56fAQIgJQf+MgR5VSPTmqX76Kr3UJe1FKU2phjwq/n2
d6JuuY9o1SKQX0RxrEAVfLL4+9TH3H8s0DgjAqrj08FfRH31vq8sKvggsmzd8a43
EP0B6WRwFts6G6GPsFy34RC04XkxuXhRggYOMtgMoY5PhwduXPQstTnUb2JF7M7D
7YXufjsQi3X/hVJSmNX9YQbhzs14ZZr8GsQrmi8M8RfDbeENYaiH22uQ4U4yh76T
gZlm7ShhKqeZTQ4NtNTfaYN9Sp9boSz+eNI2o1odW55RHHsmJb7n4nScKtZ/stn5
3lXjoqgJo3S5ynpRM/PL2sbBhYW26G5r4wuuD2ei1RjpI29t+UV4rA==
=J9hv
-----END PGP SIGNATURE-----

--wRRV7LY7NUeQGEoC--