teh bigbro blog(tm)
Bigbro's foray into the scary world of blogging
10 07 2008

Thu, 10 Jul 2008

Bind Vulnerability

After yesterday's worldwide BIND DNS update, I noticed that on Ubuntu systems, at least, the package maintainer provides a db.root with IPv4 addresses only, for the root zone DNS servers. If you want IPv6 connectivity to the root nameservers (or at least the ones that have IPv6 connectivity available) you can update your root zone to the latest definitive one available with the following command:

dig +bufsize=1200 +norec NS . @198.41.0.4 > /etc/bind/db.root

Note that your DNS root hints file, db.root, will now have AAAA records detailing the IPv6 addresses for those root servers that support them.


posted at: 12:16 | path: /technical | permanent link to this entry


copyright © 2005-2008, Gareth Eason