[Fwd: cvs commit: ports/dns/bind9 Makefile distinfo ports/dns/bind94 Makefile distinfo ports/dns/bind95 Makefile distinfo]

[Mark Andrews]

> Is there a way to restrict the ports which BIND selects -- perhaps
> at the expense of a small amount of entropy -- such that it doesn't
> try to use UDP ports which are administratively blocked (e.g. ports
> used by worms, or insecure Microsoft network utilities)? We don't 
> dare turn these port blocks off, or naive users will fall prey to 
> security holes in Microsoft products. But if BIND doesn't know to
> work around them, lookups will occasionally (and infuriatingly!)
> fail.

% grep avoid doc/misc/options 
        avoid-v4-udp-ports { <port>; ... };
        avoid-v6-udp-ports { <port>; ... };
% 

-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: Mark_Andrews at isc.org