Verisign fun.

[W.D. McKinney]

I saw that on the ISC bind9-users list also. We have moved off our bind9
servers to djbdns a couple days agao and there are patches for that
version also, but we have decided to let the dust settle as impact is
minimal right now.

I always say, "Only the experienced walk with a limp."

Dee


On Wed, 2003-09-17 at 13:39, Walter Hop wrote:
> [in reply to secabeen at pobox.com, 17-9-2003]
> 
> >> I don't know about you guys but the verisign redirecting all
> >> unregistered .com/.net domains is annoying. Someone pointed this out to
> >> me.
> >>
> >> http://achurch.org/bind-verisign-patch.html
> >
> > If you want to do something like this, here's the official ISC patch:
> >
> > http://www.isc.org/products/BIND/delegation-only.html
> 
> If you do this patch, test it carefully. I have had serious resolution
> problems with the patch on FreeBSD 4.8, and somebody else on bind9-users
> with Solaris had the same.
> 
> Unless you host applications or networks that break, I would suggest
> waiting a few days to see if an updated version becomes available.
> 
> I am nullrouting the IP addresses of Verisign's spam webservers for now.
> 
> cheers,
> walter