mir/bind
2
0
Fork 0
mirror of https://gitlab.isc.org/isc-projects/bind9 synced 2025-08-30 14:07:59 +00:00
Code Issues Releases Wiki Activity

Q: How do I restrict / prevent lookups of the version string remotely.

Browse Source
This commit is contained in:
Mark Andrews 2000-12-20 04:30:39 +00:00
parent 732f883c12
commit 0884c57e7a
1 changed files with 18 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
FAQ
View File

@ -70,3 +70,21 @@ Q: How do I produce a useful core file on Linux?
A: Apply the kernel patch found in bind9/linux/coredump-patch and rebuild
the kernel. This patch causes multithreaded programs to dump the correct
thread.
Q: How do I restrict / prevent lookups of the version string remotely.
A: The following view statement will intercept lookups as the internal
view that holds the information will be matched last. Note doing this
will not prevent attacks and may impeed people trying to diagnose problems
with your server. Also it is possible to "fingerprint" nameservers to
determine there version.
view "chaos" chaos {
match-clients { <those to be refused>; };
allow-query { none; };
zone "." {
type hint;
file "/dev/null"; // or any empty file
};
};