Multiple instances of BIND at startup

Steve Bertrand iaccounts at ibctech.ca
Fri May 23 12:23:09 UTC 2008


> Well, BIND is up to 28 published security advisories:
> 
>   http://www.isc.org/sw/bind/bind-security.php#matrix
> 
> ...which not only have included cache poisoning (2003-0914), but many of 
> them allowed for arbitrary code execution, often as root.

Ok, then I'll ask the obvious...

For those who are, or have been network ops within an Internet Service 
Provider environment, what DNS server do you recommend for reliability, 
functionality, and most importantly, ease of use so the helpdesk can 
make slight changes to client domains when required (hopefully without 
having to su to root).

The latter point is why I went from BIND to TinyDNS (VegaDNS) in the 
first place, but it's seriously lacking with IPv6 support.

Steve


More information about the freebsd-questions mailing list