|
Lines 4177-4185
Link Here
|
| 4177 |
<para>Permitting version lookups on the <acronym>DNS</acronym> |
4177 |
<para>Permitting version lookups on the <acronym>DNS</acronym> |
| 4178 |
server could be opening the doors for an attacker. A |
4178 |
server could be opening the doors for an attacker. A |
| 4179 |
malicious user may use this information to hunt up known |
4179 |
malicious user may use this information to hunt up known |
| 4180 |
exploits or bugs to utilize against the host. A false version |
4180 |
exploits or bugs to utilize against the host.</para> |
| 4181 |
string can be placed the <literal>options</literal> section of |
4181 |
|
| 4182 |
<filename>named.conf</filename>:</para> |
4182 |
<warning> |
|
|
4183 |
<para>This will not protect you from exploits. Only upgrading to a |
| 4184 |
version that is not vunerable will protect your server.</para> |
| 4185 |
</warning> |
| 4186 |
|
| 4187 |
<para>A false version string can be placed the |
| 4188 |
<literal>options</literal> section of |
| 4189 |
<filename>named.conf</filename>:</para> |
| 4183 |
|
4190 |
|
| 4184 |
<programlisting>options { |
4191 |
<programlisting>options { |
| 4185 |
directory "/etc/namedb";A |
4192 |
directory "/etc/namedb";A |