SO_ACCEPTFILTER in FreeBSD (Was: Re: ISC BIND 9.6.3 is now available)

2011-02-04 Thread Doug Barton
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 02/04/2011 16:09, Evan Hunt wrote: | * A bug in NetBSD and FreeBSD kernels with SO_ACCEPTFILTER enabled | allows for a TCP DoS attack. Until there is a kernel fix, ISC is | disabling SO_ACCEPTFILTER support in BIND. [RT #225

ISC BIND 9.6.3 is now available

2011-02-04 Thread Evan Hunt
__ Introduction BIND 9.6.3 is the current release of BIND 9.6. This document summarizes changes from BIND 9.6.2-P2 to BIND 9.6.3. Please see the CHANGES file in the source code release for a complete list of all cha