about build-in server information zones

Mark Andrews marka at isc.org
Fri Sep 29 05:13:49 UTC 2017


In message <67520106.275150.1506652341343 at mail.yahoo.com>, Sun Guonian via bind
-users writes:
> >
> Hello, ISC,
> I meet a problem, I want to conceal the host information from the
> Internet, but want it bevisible to the special client. I know it could be
> realize via bind view, but I need createa special CHAOSNET zone for every
> BIND instance, 200 or more, which include its IP address or its hostname.
>
> I want ask if BIND could support the three options statements
> version version_string;
> hostname hostname_string;
> server-id server_id_string;
> in view statement ?
> Best Regards,SUN Guonian

I know there are so called "security checklists" that say to hide
the version but it is a pointless exercise.  If there is a exploit
it will be tried regardless of whether the version is returned or
not.

Mark
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: marka at isc.org


More information about the bind-users mailing list