[SunHELP] Re: Filtering with Solaris 8 x86

[Phil Brutsche]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

A long time ago, in a galaxy far, far way, someone said...

> Like the other guy said, p7 is the "ok" one now. I can't elaborate,
> because I can't provide proof. We've only ever done forensics on them,
> we've never had sniffers in place beforehand to see it done. It's just a
> strong assumption that I'll believe. Lots of rumors and blah blah.. I just
> know from history, and present, that bind leads to problems in my
> experience, even "properly configured" ones. Wish I could tell you more,
> something you could base it off of.

Yea, I know what you mean.  I feel the same about Exchange & IIS :)

All I can say is that a BIND system has never been compromised while on my
watch.

It's just that there are two unix alternatives that I know of, one (dents)
isn't ready yet (and 'prolly won't be for quite some time), I'm not
impressed with the other (DJ Berstiens DNS server), mostly because isn't
nowhere near as proven (IMO).  And because it lacks functionality that I'm
starting to see the need for (DNSSEC).

- -- 
- ----------------------------------------------------------------------
Phil Brutsche					pbrutsch at creighton.edu

GPG fingerprint: BDA4 C23C 1989 31FF CBE8  7EB4 6CA7 9636 941E 8451
GPG key id: 941E8451
GPG public key: http://www.creighton.edu/~pbrutsch/public-key.asc
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.4 (GNU/Linux)
Comment: Made with pgp4pine

iD8DBQE6KGt2bKeWNpQehFERAgSVAKCVV/1zP+s6I6qUdnLXRU2sXeyxKwCeO6Cd
nOiow7AxSJVvq2cRafd1Q7g=
=gVuo
-----END PGP SIGNATURE-----