From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from pigeon.gentoo.org ([69.77.167.62] helo=lists.gentoo.org) by finch.gentoo.org with esmtp (Exim 4.60) (envelope-from ) id 1KNG9t-0001VA-Dg for garchives@archives.gentoo.org; Mon, 28 Jul 2008 00:00:13 +0000 Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 12101E0475; Mon, 28 Jul 2008 00:00:11 +0000 (UTC) Received: from spore.ath.cx (mail.farrellit.net [66.191.143.114]) by pigeon.gentoo.org (Postfix) with ESMTP id E72BAE0475 for ; Mon, 28 Jul 2008 00:00:10 +0000 (UTC) Received: from localhost (74-39-72-89.dr01.apvy.mn.frontiernet.net [74.39.72.89]) by spore.ath.cx (Postfix) with ESMTP id 918ED3B986 for ; Sun, 27 Jul 2008 19:00:10 -0500 (CDT) Date: Sun, 27 Jul 2008 18:03:55 -0500 From: Dan Farrell To: gentoo-user@lists.gentoo.org Subject: [gentoo-user] DNS Server Patches Message-ID: <20080727180355.7600fa0b@spore.ath.cx> X-Mailer: Claws Mail 3.0.2 (GTK+ 2.12.1; i686-pc-linux-gnu) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@lists.gentoo.org Reply-to: gentoo-user@lists.gentoo.org Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-Archives-Salt: 95e6d00e-a0b1-4e2e-8ba6-b24066a9c406 X-Archives-Hash: 61249b250c9775ef5317d62ed8cdf6cb The recently released (early july) advisory on the DNS exploits discovered earlier this year have caused a bit of stir on the BIND mailing lists, and rightly so. Everybody on board with this one? CERT Bulletin: http://www.kb.cert.org/vuls/id/800113 Dan Kiersky's own description, and web-based nameserver checker: http://www.doxpara.com/ Alternate web-based nameserver checker (recommended by me! ) https://www.dns-oarc.net/oarc/services/dnsentropy If your nameservers aren't updated, do so! If your ISP's nameservers aren't updated, hound them relentlessly until they are! This is the only way we can all protect the validity of our clients and our own data.