> Just a quick review: which providers have already installed the
> Bind "delegation only" patch re. Verisign/Sitefinder (or similar
> for their environment)?
Done this the last couple of days for VIA (some servers upgraded to latest bind9,
others bind8 forwarder-chained to the new bind9 ones as per the instructions
on www.isc.org). Only thing to watch out: there _are_ TLDs that include
non-delegation records, so don't be too restrictive in your root-delegation-only
clause. With the following setting from what I can tell in the logs there should
be no legit entries rejected, but I'll have to recheck in a while:
root-delegation-only exclude { "de"; "lv"; "museum"; "us"; "ch"; "biz"; };
(I don't know about .ch - there at least USED to be MX records in there
directly in the good old UUCP times, don't know whether some survived;-)).
Markus
----------------------------------------------
[EMAIL PROTECTED] Maillist-Archive:
http://www.mail-archive.com/swinog%40swinog.ch/
