How secure is rndc?

[Marc Haber]

[This is a repost of an article posted to comp.protocols.dns.bind two
days ago that has not yet appeared on the newsgroup or on the list
which I have subscribed in the mean time.]

Hi,

I am wondering whether it is a problem to run rndc over the Internet
to a remote server. I am usually using ssh to "tunnel" the rndc
request (ssh remotehost rndc foo) but I am wondering whether I'd lose
much security if I'd use rndc -s remotehost foo instead.

Opening tcp/953 for the appropriate hosts is possible.

Greetings
Marc


-- 
-----------------------------------------------------------------------------
Marc Haber         | "I don't trust Computers. They | Mailadresse im Header
Mannheim, Germany  |  lose things."    Winona Ryder | Fon: *49 621 72739834
Nordisch by Nature |  How to make an American Quilt | Fax: *49 621 72739835