[Pdns-users] request - hide version information for txt version.bind?

Adam Breaux abreaux at domainbank.com
Wed Feb 4 12:17:59 UTC 2004


Definitely agree with this one. Too much info being given out thru this
banner.

-----Original Message-----
From: pdns-users-bounces at mailman.powerdns.com
[mailto:pdns-users-bounces at mailman.powerdns.com] On Behalf Of sil
Sent: Wednesday, February 04, 2004 3:35 AM
To: pdns-users at mailman.powerdns.com
Subject: [Pdns-users] request - hide version information for txt
version.bind?


Hi,

 Firstly I am very happy with powerdns, I found it easy to setup and
 use :)

 I guess this is a type of feature request, the current situation
 (POWERDNS 2.9.13) a lookup of

host -t txt version.bind 127.0.0.1

 gives

version.bind text "Served by POWERDNS 2.9.13 $Id: packethandler.cc,v
1.19 2003/11/23 15:14:57 ahu Exp $"

 I think this is too much information leak, the version number
 (2.9.13) does not need to be there at least. I am proposing something
 similar to apache with it's ServerTokens directive

 http://httpd.apache.org/docs/mod/core.html#servertokens

 So giving the ability to hide version number if preferred (w/o
 editing code / re-compiling).

 Perhaps another way would be to allow the user to have an entry in
 the DB for a TXT lookup on version.bind and specify whatever they
 liked there (I tried this but it didn't seem to work).

Thanks for a neat dns server :)

Sil

_______________________________________________
Pdns-users mailing list
Pdns-users at mailman.powerdns.com
http://mailman.powerdns.com/mailman/listinfo/pdns-users




More information about the Pdns-users mailing list