Verisign and Bind update

["James Miller" <jimm@simutronics.com>]

Will the package maintainers of BIND be integrating the patches from
ISC-BIND to negate  Verisign's recent shenanigans?

--from ISC's web site --

In response to high demand from our users, ISC is releasing a patch for BIND
to support the declaration of "delegation-only" zones in caching/recursive
name servers. Briefly, a zone which has been declared "delegation-only" will
be effectively limited to containing NS RRs for subdomains, but no actual
data outside its apex (for example, its SOA RR and apex NS RRset). This can
be used to filter out "wildcard" or "synthesized" data from NAT boxes or
from authoritative name servers whose undelegated (in-zone) data is of no
interest.

Example named.conf entry for the zone:

zone "foo" {
     type delegation-only;
};
Release Candidates/Patches that support "delegation-only" zones:



->Jim