BIND 4.9.7

[Steven E. Protter]

I just ran saint on my new L2000 server which I've been preparing for production practically forever.

It mentions a BIND 4.9.7 vulnerability and I realized something.

I've installed the depot || BIND-920 -> B.11.11.01.00 BIND 9.2.0 but apparently have not configured the machine to actually use it.

I could use some help in switching the system over. There might be some understanding gaps on my part with regards to this whole issue.

I know what bind is for, but am unsure of how to tinker with it.

As always, points awarded liberally, if thats what you want.

(I give a point for every response, because I want people when they look at my id to see I always read and appreciate their response. I noticed that the top forum people like Bill Hassel and Clay Stephenson follow this policy. I find it gets me help more quickly)

Steve

[Pete Randall]

Hi Steve,

If you can get your hands on them, the HP manual called Installing and Administering Internet Services and the O'Reilly DNS & Bind book are good sources.

Pete

[Pete Randall]

Steve,

Here's a link to the HP manual:

http://www.docs.hp.com/hpux/netcom/index.html#Internet%20Services

Pete

[harry d brown jr]

What does:

what /usr/sbin/named

return?

like this:

# what /usr/sbin/named
/usr/sbin/named:
Copyright (c) 1986, 1989, 1990 The Regents of the University of California.
named 8.1.2 Thu Feb 15 05:53:45 GMT 2001 PHNE_23275
#


live free or die
harry

[Steven E. Protter]

[1741#] what /usr/sbin/named
/usr/sbin/named:
$Revision: 2.0 $ Sat Sep 21 11:37:57 GMT 2002
named 9.2.0 Sat Sep 21 11:37:57 GMT 2002
Copyright (C) 1995-1998 Eric Young.All rights reserved.

I wonder why the 4.9.7 Error shows up on the saint utility. You'd think based on this output I alsready have the problem licked.

Hmmmm.

Steve

[Kevin Wright]

Do you have bind 4.9.7 installed in another directory path other than /usr/sbin/named. It is possible you have 2 named procesess running.

[Plamen SIMEONOV]

Hello,

Full documentation for BIND 9.X : http://www.nominum.com/content/documents/bind9arm.pdf

Usually BIND 9.2 from depot switchs versions correctly.

Plamen

[Steven E. Protter]

Fascinating as this is, the named daemon isn't even running on this machine.

/etc/rc.config.d/namesvrs and ps -ef | grep name confirms thsi.

Quite strange. I don't see more than one version of bind installed either. It looks more and more like saint is broken.

Pretty good utility. It pointed out some problems I need to deal with concerning sendmail daemon.

Steve