Basic Question re Security issue
Alan Clegg
Alan_Clegg at isc.org
Sat Jul 26 02:51:07 UTC 2008
Skeeve Stevens wrote:
> After we have the latest safe code, what config changes should we be making
> for everything to be ok?
You mean to not break what the patch fixed?
make sure you don't have a:
udp-source port XX;
in your config. And make sure your servers are not behind NAT devices
that remove the randomness that you have now gained on your outbound
queries.
AlanC
More information about the bind-users
mailing list