BIND

[WipeOut]

Richard Welty wrote:

>On Thu, 04 Mar 2004 12:03:36 +0000 WipeOut <wipe_out at users.sourceforge.net> wrote:
>
>  
>
>>Is running BIND still considdered a major security risk??
>>    
>>
>
>  
>
>>I remember a while back it was not considdered a good idea to run your 
>>own BIND/DNS server.. (also that I would need to run it on my web/mail 
>>server since I only have 1 server)
>>    
>>
>
>Bind 9 is fairly good. it's a bit of a resource pig, but the code isn't
>bad. run it chrooted and you should be fine.
>
>Bind 8 was a disaster, and the only truly safe
>Bind 4 was the audited one included in OpenBSD.
>
>richard
>  
>
When you say "resource pig" how bad are we talking?