Home page logo
/

bugtraq logo Bugtraq mailing list archives

Re: Silly patch to report version.bind requests
From: lamont () CRANSTON FC HP COM (LaMont Jones)
Date: Fri, 12 Jun 1998 15:28:39 -0600


I wrote this patch for BIND 8.1.2 that will change the version number
returned and (most importantly) write to your logs that a person attempted
to do so.

Rather than hacking on the source, just do the following with the stock
distribution:

in named.conf:
zone "bind" chaos { allow-query {localhost; }; type master; file "pri/bind"; };

and in pri/bind:
$ORIGIN bind.
@       1D CHAOS SOA    localhost. root.localhost. (
                        1               ; serial
                        3H              ; refresh
                        1H              ; retry
                        1W              ; expiry
                        1D )            ; minimum
        CHAOS NS        localhost.

Presto - log messages for denied queries, and no changes to the code.

lamont



  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
AlienVault