nsd users - Apr 2007 - Patch to 3.0.5 to disable VERSION.BIND responses

Hi,

I have attached a patch to NSD 3.0.5 that will refuse responses to the 
Chaos queries VERSION.BIND and VERSION.SERVER.  It adds an nsd.conf 
variable version-bind which defaults to yes meaning it will respond. 
Setting the variable to no will cause NSD to refuse the request.

I would like to request that this patch be added into the mainstream 
code so I don't have to patch future versions.  I hope this will be of 
use to other users as well.

Kevin
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: nsd.patch
URL:
<http://lists.nlnetlabs.nl/pipermail/nsd-users/attachments/20070403/a907c3d3/attachment.ksh>

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi Kevin,

Kevin Wormington wrote:
> I have attached a patch to NSD 3.0.5 that will refuse responses to the
> Chaos queries VERSION.BIND and VERSION.SERVER.  It adds an nsd.conf
> variable version-bind which defaults to yes meaning it will respond.
> Setting the variable to no will cause NSD to refuse the request.
> 
> I would like to request that this patch be added into the mainstream
> code so I don't have to patch future versions.  I hope this will be of
> use to other users as well.
Thanks for submitting your patch.
We'll take this into consideration for inclusion.

Regards,

Mark

- --
Mark Santcroos
NLnet Labs
http://www.nlnetlabs.nl/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (Darwin)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFGHMiLvgq6Qtvn644RAg06AJ49kgFBG+cYoQX+F/7t2ZOAnKGd2gCgughJ
GQO3alRvtDwgmzXASGP3VHI=XT2j
-----END PGP SIGNATURE-----