I have updated my Trust beta 1 test machine and Bind9 is working with
the RRL, when the config is added.
Thanks to all and I look forward to the new release.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/b
This bug was fixed in the package bind9 - 1:9.9.5.dfsg-3
---
bind9 (1:9.9.5.dfsg-3) unstable; urgency=low
* Re-enable rrl (now a configure option). Closes: #741059 LP: #1288823
-- LaMont Jones Mon, 24 Mar 2014 06:55:55 -0600
** Changed in: bind9 (Ubuntu)
Status: Triage
** Branch linked: lp:debian/bind9
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1288823
Title:
Trusty bind9 RRL
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+sour
Given that response rate limiting is considered (short of implementing BCP 38)
the recommended
mitigation against the rampant DNS Amplification Attacks it would be foolish to
strip Ubuntu LTS users of that tool!
See: https://www.us-cert.gov/ncas/alerts/TA13-088A
--
You received this bug notifi
Following discussion on IRC:
> 1) Why is this configuration option not default upstream?
For their stable release policy. This doesn't apply to a new Ubuntu
release.
> 2) Debian doesn't carry this flag.
It will.
> 3) Any security implications that I've not thought of?
Marc has acked the confi
More info on why it's not build with --enable-rrl by defaut:
https://kb.isc.org/article/AA-01058
I have no objection to building it with --enable-rrl, as long as it's
not configured by default.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to
Thank you for taking the time to report this bug and helping to make
Ubuntu better.
This sounds like a reasonable request, but I have a few reservations:
1) Why is this configuration option not default upstream? Does this mean
that they don't consider it ready for general default production use,
The attachment "Patch to modify debian/rules to enable rrl" seems to be
a patch. If it isn't, please remove the "patch" flag from the
attachment, remove the "patch" tag, and if you are a member of the
~ubuntu-reviewers, unsubscribe the team.
[This is an automated message performed by a Launchpad
