Re: bind running as root in Mandrake 7.0

[shalunov () INTERNET2 EDU (stanislav shalunov)]

Nathan Neulinger <nneul () UMR EDU> writes:

> It is necessary to separately bind to the interfaces in order to
> determine which interface a request came in on. This is needed for
> some of bind's security mechanisms.

Actually, I think the reason BIND binds to all interfaces individually
is to be able to send responses that come from the same IP number they
were sent to.

Requests that come from a different IP than the one they were sent to
are usually discarded (by BIND for sure, and probably by other
standard-compliant servers as well as stub resolver libraries).