Verisign fun.

Walter Hop freebsd at walter.transip.nl
Wed Sep 17 14:39:42 PDT 2003


[in reply to secabeen at pobox.com, 17-9-2003]

>> I don't know about you guys but the verisign redirecting all
>> unregistered .com/.net domains is annoying. Someone pointed this out to
>> me.
>>
>> http://achurch.org/bind-verisign-patch.html
>
> If you want to do something like this, here's the official ISC patch:
>
> http://www.isc.org/products/BIND/delegation-only.html

If you do this patch, test it carefully. I have had serious resolution
problems with the patch on FreeBSD 4.8, and somebody else on bind9-users
with Solaris had the same.

Unless you host applications or networks that break, I would suggest
waiting a few days to see if an updated version becomes available.

I am nullrouting the IP addresses of Verisign's spam webservers for now.

cheers,
walter

-- 
We have met the enemy, and he is us.



More information about the freebsd-isp mailing list