Web lists-archives.com

Re: bind9 shipping outdated root hint file (etc.)




Robert Edmonds:
The only package in the archive that I know of that has a seriously deficient set of root hints is djbdns; it has 11/13 of the current set of IPv4 root server addresses, and 0/13 IPv6 root server addresses. (However, I don't believe the 'djbdns' binary package ships with the IPv6 patch applied.)

What you know is somewhat wrong.

dnscache does not use a "hints" mechanism. It uses a list of the actual servers. People patched this list *years ago*. P. J. Pandit, publisher of ndjbdns for Fedora, updated xyr published copy of the list in 2013. I had an updated list in the very first published version of djbwares.

* http://jdebp.eu./Softwares/djbwares/

I later fixed ip6.arpa and removed the egregiously outdated RBL list, too.

* https://lists.debian.org/debian-user/2017/03/msg01307.html

But that is as nothing. I *first* patched this list almost *a decade and a half ago*.

* http://jdebp.eu./FGA/djbdns-problems.html#wrong-icann-root

Debian's list in its djbdns package is actually a private Debian one that is substituted by Debian in place of the one from the djbdns itself, named debian/dnsroots.global . Debian needs to catch up.