Well, BIND is up to 28 published security advisories:

  http://www.isc.org/sw/bind/bind-security.php#matrix

...which not only have included cache poisoning (2003-0914), but many of them allowed for arbitrary code execution, often as root.

Ok, then I'll ask the obvious...

For those who are, or have been network ops within an Internet Service Provider environment, what DNS server do you recommend for reliability, functionality, and most importantly, ease of use so the helpdesk can make slight changes to client domains when required (hopefully without having to su to root).

The latter point is why I went from BIND to TinyDNS (VegaDNS) in the first place, but it's seriously lacking with IPv6 support.

Steve
_______________________________________________
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Reply via email to