Those who are considered about security holes in BIND might want to look at alternatives. One such alternative is djbdns. I'm not going to repeat all the information that is on the website http://cr.yp.to/djbdns.html but will mention that it comes with a security guarantee.

Djbdns is not a drop-in replacement for BIND and has some prerequisites for the unix environment (additional packages 'daemontools' and 'ucspi-tcp', also from the author). However it is very reliable, portable, lightweight, and easy to configure and maintain. I see no reason to go back to BIND anymore and I would recommend djbdns for anyone administering domains.

- Arttu Karpinlehto

Design Power, Inc.

Cupertino, CA

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/articles/144/4503#4503