Bind9

Bind is the major free DNS server and client implementation provided by the ISC. Our patches are for version 9 only.

• bind9-disable-txt-recurse-mprivacy.diff for v9.3.4
• bind9-disable-txt-recurse-mprivacy.diff for v9.5.1
  • This patch adds a new option -T to the named binary, which disables recursive TXT lookups. TXT lookups can be misused for DNS protocol based VPN tunnels, which undermine local network security.