Wichert Akkerman wrote: > And the simple answer to that is: > 1. bind is not DFSG-free and not packaged for Debian which makes it > off-topic here. You mean djbdns, of course. > 2. replacing bind is not the same thing as securing it, which was > the question. There is a small presentation by Mr. Cricket Liu on the « Securing DNS » topic, that, although short, is most interesting : http://www.acmebw.com/papers/securing.pdf -- Thomas Seyrat.