October 2002
Intermediate to advanced
448 pages
14h 54m
English
Content preview from Building Secure Servers with LinuxBecome an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
Resources
Hopefully, we’ve given you a decent start on
securing your BIND- or djbdns-based DNS server.
You may also find the following resources helpful.
General DNS Security Resources
comp.protocols.tcp-ip.domains USENET group: “FAQ.” Web site: http://www.intac.com/~cdp/cptd-faq/. Frequently Asked Questions about DNS.
Rowland, Craig. “Securing BIND.” Web site: http://www.psionic.com/papers/whitep01.html. Instructions on securing BIND on both OpenBSD and Red Hat Linux.
Some DNS-related RFCs (available at http://www.rfc-editor.org)
1035 (general DNS specs)
1183 (additional Resource Record specifications)
2308 (Negative Caching)
2136 (Dynamic Updates)
1996 (DNS Notify)
2535 (DNS Security Extensions)
Some DNS/BIND security advisories (available at http://www.cert.org)
- CA-2002-15
“Denial-of-Service Vulnerability in ISC BIND 9”
- CA-2000-03
“Continuing Compromises of DNS Servers”
- CA-99-14
“Multiple Vulnerabilities in BIND”
- CA-98.05
“Multiple Vulnerabilities in BIND”
- CA-97.22
“BIND” ( cache-poisoning)
BIND Resources
Internet Software Consortium. “BIND Operator’s Guide” (“BOG”). Distributed separately from BIND 8 source code; current version downloadable from ftp://ftp.isc.org/isc/bind/src/8.3.3/bind-doc.tar.gz. The BOG is the most important and useful piece of official BIND 8 documentation.
Internet Software Consortium. “BIND 9 Administrator Reference Manual.” Included with BIND 9 source-code distributions in the directory
doc/arm, filenameBv9ARM.html. Also available in PDF format from http://www.nominum.com/content/documents/bind9arm.pdf ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access
More than 5,000 organizations count on O’Reilly
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.Julian F.
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.Addison B.
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.Amir M.
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.