Offizieller BIND-Patch fuer rein deligierende Zonen

[Florian Weimer <fw@deneb.enyo.de>]

Es gibt nun einen offiziellen BIND-Patch, der auf Caching/Recursive
Resolvers rein deligierende Zonen durchsetzt. Das ist bislang die
sauberste der verfügbaren Lösungen.

Mal sehen, wie viele Leute das für alle TLDs aktivieren,
einschließlich .de. 8-)

From: Mark_Andrews@isc.org
Subject: BIND 9.2.2-P1 is now available.
To: bind-announce@isc.org
Date: Wed, 17 Sep 2003 18:03:51 +1000
Message-Id: <200309170803.h8H83pmm012337@drugs.dv.isc.org>


		BIND 9.2.2-P1 is now available.

In response to high demand from our users, ISC is releasing a patch for BIND
to support the declaration of "delegation-only" zones in caching/recursive
name servers.  Briefly, a zone which has been declared "delegation-only" will
be effectively limited to containing NS RRs for subdomains, but no actual
data outside its apex (for example, its SOA RR and apex NS RRset).  This can
be used to filter out "wildcard" or "synthesized" data from NAT boxes or from
authoritative name servers whose undelegated (in-zone) data is of no interest.


BIND 9.2.2-P1 can be downloaded from

        ftp://ftp.isc.org/isc/bind9/9.2.2/patch.9.2.2-P1

The PGP signature of the distribution is at

        ftp://ftp.isc.org/isc/bind9/9.2.2/patch.9.2.2-P1.asc

--
To unsubscribe, e-mail: debate-unsubscribe@lists.fitug.de
For additional commands, e-mail: debate-help@lists.fitug.de