[permalink] [id link]
BIND version 9 was written from scratch and now has a security record comparable to other modern DNS software.
from
Wikipedia
Some Related Sentences
BIND and version
BIND also sets the LDAP protocol version.
BIND had to be the first operation in a session in LDAPv2, but is not required in LDAPv3 ( the current LDAP version ).
This file is called named. cache in the BIND nameserver reference implementation and a current version is officially distributed by ICANN's InterNIC.
Most notably, the Internet Systems Consortium announced that it had produced a version of the BIND DNS software that could be configured by Internet service providers to filter out wildcard DNS from certain domains ; this software was deployed by a number of ISPs.
Some sources claim that the DNS server implementation in Windows NT 3. 51 was a fork of ISC's BIND version 4. 3, but this is not true.
As of 2004, it was the fourth most popular DNS server ( counting BIND version 9 separately from versions 8 and 4 ) for the publication of DNS data.
BIND and 9
In the mid-1980s, DEC employees took over BIND development, releasing versions 4. 9 and 4. 9. 1.
One of these employees, Paul Vixie, continued to work on BIND after leaving DEC. BIND Version 4. 9. 2 was sponsored by Vixie Enterprises.
He eventually helped start the ISC, which became the entity responsible for BIND versions starting with 4. 9. 3.
Other important features of BIND 9 include: TSIG, nsupdate, IPv6, rndc ( remote name daemon control ), views, multiprocessor support, and an improved portability architecture.
The development of BIND 9 took place under a combination of commercial and military contracts.
Most of the features of BIND 9 were funded by UNIX vendors who wanted to ensure that BIND stayed competitive with Microsoft's DNS offerings ; the DNSSEC features were funded by the US military, which regarded DNS security as important.
BIND 9 was released in September 2000.
While earlier versions of BIND offered no mechanism to store and retrieve zone data in anything other than flat text files, in 2007 BIND 9. 4 DLZ made available ( as a compile-time option ) zone storage in a variety of database formats including LDAP, Berkeley DB, PostgreSQL, MySQL, and ODBC.
BIND 9 was a complete rewrite, in part to mitigate these ongoing security issues.
* BIND 9 DNS Administration Reference Book: Name Server Operations and DNS Configuration using BIND.
* LWRES, a BIND 9 lightweight resolver library
The hijacking was made possible using a DNS cache poisoning attack, exploiting a security vulnerability in versions of BIND earlier than 4. 9. 6.
For example, versions of BIND 9. 5. 0-P1 and above perform these checks.
* BIND 9 DNS Cache Poisoning-Discovered by Amit Klein ( Trusteer )
BIND and was
BIND was ported to the Windows NT platform in the early 1990s.
BIND was widely distributed, especially on Unix systems, and is the dominant DNS software in use on the Internet.
BIND was first released with Berkeley Software Distribution 4. 3BSD, and as such, it is free and open source software.
BIND was written by Douglas Terry, Mark Painter, David Riggle and Songnian Zhou in the early 1980s at the University of California, Berkeley as a result of a DARPA grant.
BIND 8 was released by ISC in May 1997.
It was written from scratch in part to address the architectural difficulties with auditing the earlier BIND code bases, and also to support DNSSEC ( DNS Security Extensions ).
ISC was originally founded in 1994 as Internet Software Consortium, Inc., to continue the work of maintaining and enhancing BIND following the footsteps of CSRG at U. C. Berkeley, Digital Equipment Corp., and Vixie Enterprises.
This format was originally used by the Berkeley Internet Name Domain ( BIND ) software package, but has been widely adopted by other DNS server software-though some of them ( e. g. NSD, PowerDNS ) are using the zone files only as a starting point to compile them into database format, see also Microsoft DNS with Active Directory-database integration.
BIND and from
The acronym BIND is for Berkeley Internet Name Domain, from a technical paper published in 1984.
PowerDNS features a large number of different backends ranging from simple BIND style zonefiles to relational databases and load balancing / failover algorithms.
; bind and bind2: Reads zone data from regular BIND style zonefiles
Source port randomization via BIND backed up by a non-BIND DNS server software with intelligence blended into the BGP routing protocol mitigates the DNS Anycast cache poisoning attacks from malicious users.
BIND and now
The long-obsolete BIND 4 and BIND 8 have both had a substantial number of serious security vulnerabilities over the years, and as such their use is now strongly discouraged.
BIND and has
However, Microsoft has taken care to ensure good interoperability with BIND and other implementations in terms of zone file format, zone transfer, and other DNS protocol details.
( Contrast this with BIND, where when such changes are made, the list of zones, in the < tt >/ etc / named. conf </ tt > file, has to be explicitly updated on each individual server.
BIND and security
With the heavy use and resulting scrutiny of its open-source code, as well as increasingly more sophisticated attack methods, many security flaws were discovered in BIND.
The djbdns software package is a DNS implementation created by Daniel J. Bernstein due to his frustrations with repeated BIND security holes.
BIND and record
Some DNS server software, such as BIND, also requires at least one additional name server record.
BIND and DNS
BIND (), or named (), is the most widely used DNS software on the Internet.
* DNS and BIND, Fifth Edition by Paul Albitz, Cricket Liu.
* CircleID Interview with Cricket Liu, author of ' DNS and BIND '
* DNS BIND Editor A GUI editor for ISC BIND
* DNS & BIND Resources
BIND uses a built-in pseudo-top-level-domain in the " CHAOS class " for retrieving information about a running DNS server.
* Many technical works, such as Cricket Liu's DNS and BIND ( O ' Reilly ), Per Cederqvist's Version Management with CVS, Jesse Vincent's RT Essentials ( O ' Reilly ), and the GNU General Public License use Yoyodyne as a company name in their examples.
Application-based support includes Apache, PHP, MySQL, PostgreSQL, Perl, and BIND ( DNS ).
0.149 seconds.