====== Bind9 ====== [[https://www.isc.org/software/bind|Bind]] is the major free DNS server and client implementation provided by the ISC. Our patches are for version 9 only. ==== Patches ==== * [[http://oss.m-privacy.de/download/bind9/bind9-disable-txt-recurse-mprivacy.diff|bind9-disable-txt-recurse-mprivacy.diff for v9.3.4]] * [[http://oss.m-privacy.de/download/bind9/bind9-9.5.1-disable-txt-recurse-mprivacy.diff|bind9-disable-txt-recurse-mprivacy.diff for v9.5.1]] * This patch adds a new option -T to the named binary, which disables recursive TXT lookups. TXT lookups can be misused for DNS protocol based VPN tunnels, which undermine local network security.