Hiding the version number

[Kevin Darcy]

Jon Fullmer wrote:

> Our security scanner mentioned that they can determine the version number of
> BIND that we're running, and that while this isn't a major security hazard,
> it's best to be disabled.  I THINK I've figured out that I can control the
> display of the BIND version information using the "version" command in the
> "options" section.
>
> What I want to know is, how can I test this?  I've been looking for some way
> to issue a dig command that would tell me my server's version of BIND, but I
> can't find it.  How is this done?

dig version.bind txt chaos @server


- Kevin