Verisign fun.

Brad Davis brad at liquidneon.com
Thu Sep 18 06:04:09 PDT 2003


I just did the same, and I am pretty happy with djbdns. Patches also
exist for djbdns to do something similar.


Brad

On Wed, Sep 17, 2003 at 01:47:38PM -0800, W.D. McKinney wrote:
> I saw that on the ISC bind9-users list also. We have moved off our bind9
> servers to djbdns a couple days agao and there are patches for that
> version also, but we have decided to let the dust settle as impact is
> minimal right now.
> 
> I always say, "Only the experienced walk with a limp."
> 
> Dee
> 
> 
> On Wed, 2003-09-17 at 13:39, Walter Hop wrote:
> > [in reply to secabeen at pobox.com, 17-9-2003]
> > 
> > >> I don't know about you guys but the verisign redirecting all
> > >> unregistered .com/.net domains is annoying. Someone pointed this out to
> > >> me.
> > >>
> > >> http://achurch.org/bind-verisign-patch.html
> > >
> > > If you want to do something like this, here's the official ISC patch:
> > >
> > > http://www.isc.org/products/BIND/delegation-only.html
> > 
> > If you do this patch, test it carefully. I have had serious resolution
> > problems with the patch on FreeBSD 4.8, and somebody else on bind9-users
> > with Solaris had the same.
> > 
> > Unless you host applications or networks that break, I would suggest
> > waiting a few days to see if an updated version becomes available.
> > 
> > I am nullrouting the IP addresses of Verisign's spam webservers for now.
> > 
> > cheers,
> > walter
> 
> _______________________________________________
> freebsd-isp at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-isp
> To unsubscribe, send any mail to "freebsd-isp-unsubscribe at freebsd.org"


More information about the freebsd-isp mailing list