Re: Any workarounds for Verisign .com/.net highjacking?

[Oliver Eikemeier]

Doug Barton wrote:

ISC is in the process of releasing patched versions of BIND, which I
plan to take advantage of. :)
Doug
Patch to port dns/bind9 to upgrade bind9 to 9.2.2-P1:
<http://www.isc.org/products/BIND/delegation-only.html>
--- bind9.patch begins here ---
diff -u Makefile.orig Makefile
--- Makefile.orig       Sat Sep  6 02:05:46 2003
+++ Makefile    Wed Sep 17 13:06:06 2003
@@ -19,6 +19,11 @@
MASTER_SITE_SUBDIR=     bind9/${ISCVERSION}
DISTFILES=      bind-${ISCVERSION}.tar.gz
+PATCH_SITES=   ${MASTER_SITES}
+PATCH_SITE_SUBDIR=     ${MASTER_SITE_SUBDIR}
+PATCHFILES=    patch.9.2.2-P1
+PATCH_DIST_STRIP=      -p1
+
MAINTAINER=     [EMAIL PROTECTED]
COMMENT=        Completely new version of the BIND DNS server
diff -u distinfo.orig distinfo
--- distinfo.orig       Tue Mar  4 10:44:15 2003
+++ distinfo    Wed Sep 17 13:06:14 2003
@@ -1 +1,2 @@
MD5 (bind-9.2.2.tar.gz) = 6ea7d64a0856893ab3eb541ab7bbc725
+MD5 (patch.9.2.2-P1) = 063edc41c756ffc6a1051d5f1937fa2c
--- bind9.patch ends here ---
put

zone "com" { 
    type delegation-only; 
};

zone "net" { 
    type delegation-only; 
};

in your named.conf:

hasta la vista, 64.94.110.11

Have fun
   Oliver
_______________________________________________
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
To unsubscribe, send any mail to "[EMAIL PROTECTED]"