Comment on Show HN: BIND9 Denial of Service Exploit CheckerComments−ppuIndd11yThe problem with checking version.bind is that SOP for configuring BIND securely has been to disable or spoof it for some time now.−dolfje11yYes, that is a problem. 'Hardened' configurations cannot be checked. But there are a lot of non-hardened configuration. Actually there are more that returns there version than not.
Comments
The problem with checking version.bind is that SOP for configuring BIND securely has been to disable or spoof it for some time now.
Yes, that is a problem. 'Hardened' configurations cannot be checked. But there are a lot of non-hardened configuration. Actually there are more that returns there version than not.