Re: Bind4/IPv6/DNSSEC support

Diego Righi <[email protected]> Sun, 8 Dec 2002 20:51:37 +0100
Newsgroups gmane.os.openbsd.ipv6
Organization Die&Go Multimedia
Message-ID <[email protected]>
One thing is to support ipv6 name resolution, another is being able to listen 
on an ipv6 address for queries and so on... when djbdns will include a stable 
and default ipv6 support, in tcp and udp mode, I will be happy to drop bind9, 
but until then, I will continue to use bind9 chrooted and unprivileged.

Correct me if i'm wrong =)

On Sunday 08 December 2002 19:27, Andrew Rucker Jones wrote:
> Um, i've never heard that BIND 4 could do IPv6, but maybe i just missed
> that one. ISC's web site insinuates that BIND 9 is the first version of
> BIND that can do IPv6 and DNSSEC. I've never heard anything to the
> contrary. Not even the O'Reilly book on DNS & BIND mentions DNSSEC or
> IPv6 until the advent of BIND 9. Besides that, BIND 4 is not being
> developed, and IPv6 is still young. Especially the DNS part of IPv6 is
> not set in stone. I realize that OpenBSD still ships with BIND 4 because
> it has been thoroughly audited by the OpenBSD team, but i still wouldn't
> think about using anything but BIND 9. Only my personal opinion.
>
> 			-&
>
> Virginie wrote:
> > -----BEGIN PGP SIGNED MESSAGE-----
> > Hash: SHA1
> >
> >
> >
> > Hi all,
> >
> > Bind4 is known to be IPv6 ready since release 4.9.5. So I tried to
> > understand how to deal with but I didn't find any documentation on this
> > topic, except a very very old "IPv6" draft written by Paul Vixie in 1996
> > and still available in recent system sources (OpenBSD 3.1 ->
> > /usr/src/usr.sbin/named/doc/misc/ipv6) as the unique bind4-IPv6
> > documentation on the system.
> >
> > Nothing more in the named man nor in the OpenBSD FAQ. Same thing
> > regarding DNSSEC : I didn't even find if bind4 was now supporting DNSSEC,
> > and the DNSSEC website and mailing-lists just speak about Bind4 as a
> > "deprecated" DNS...
> >
> > I've an heavy confidence in OpenBSD developpers choices, so I would
> > clearly prefer to keep Bind4 instead of installing Bind9, but I need to
> > know if IPv6 support is just a legend or not, and if DNSSEC support
> > exists or may exist. Optionally I would enjoy some precisions on the
> > related options :-) (like the Bind9 listen-to-v6 for example). Any
> > indication is welcome.
> >
> > Thanks per advance,
> >
> > Virginie
> >
> > - --
> > [email protected]
> > question = ( to ) ? be : ! be;
> >                 -- Wm. Shakespeare
> > -----BEGIN PGP SIGNATURE-----
> > Version: GnuPG v1.2.1 (GNU/Linux)
> >
> > iD8DBQE984kA5238enIZtU4RAtvnAJ9XJJwqSlDE+xap4Y6fyP3N5o0W1ACfUBWq
> > JFwyII+13K455/54TNp3inw=
> > =9fAC
> > -----END PGP SIGNATURE-----