Re: [Leaf-devel] BIND Exploit

2001-01-30 Thread Jack Coates
missed that joke but I think I can guess :-) I'd like to use qmail, but it's bloody difficult to get going. Postfix seems like a good way to go as its interface appears to be really sendmail compatible (instead of qmail's sorta-compatible). So I'll probably try to develop with postfix, depending

Re: [Leaf-devel] BIND Exploit

2001-01-30 Thread Jack Coates
look out though, the 9.1 code doesn't support chroot'ing on 2.2 kernels: named: -u not supported on Linux kernels older than 2.3.99-pre3 when using threads Looks like fixing this is going to take a few hours and a kernel upgrade... -- Jack Coates Monkeynoodle: It's what's for dinner! On Tue, 30

Re: [Leaf-devel] BIND Exploit

2001-01-30 Thread thc
On Tue, Jan 30, 2001 at 05:38:13AM -0500, George Metz scribbled: > In case you haven't had a chance to read Slashdot today, there's a new > huge, gaping, drive-a-Mack-Truck-up-and-parallel-park-it sized security > hole in BIND v8.2.2 and v4.9.7 and earlier. This one's a biggie, so if > you're runn

[Leaf-devel] BIND Exploit

2001-01-30 Thread George Metz
In case you haven't had a chance to read Slashdot today, there's a new huge, gaping, drive-a-Mack-Truck-up-and-parallel-park-it sized security hole in BIND v8.2.2 and v4.9.7 and earlier. This one's a biggie, so if you're running it and/or got any packages made out of the older versions, go to 4.9.