[MaraDNS list] MaraDNS 1 (legacy) security bugfix
Sam Trenholme <[email protected]> Sat, 17 Mar 2012 13:10:02 -0400
| Newsgroups | gmane.network.dns.maradns.general |
|---|---|
| Message-ID | <CAJxgfkSjUJkUZhH6Kpfd8DMFfDSkPU0jtRcA-OrBWOY7DHObcA@mail.gmail.com> |
Security fix for MaraDNS 1: Maximum TTL is now one day, to avoid ghost domain-style attacks with the legacy version of MaraDNS. This is akin to the recent Deadwood update. It can be downloaded here: http://www.maradns.org/download/1.4/ http://www.maradns.org/download/1.3/ Updated changelog is at http://maradns.org/changelog.html Patch is at http://maradns.org/download/patches/security/maradns-1.4.11-ghostdomain.patch I plan to work on MaraDNS/Deadwood again one day this month, after the 20th, unless a critical security bug is found. - Sam