More on the DNS/BIND Problems...and one solution...

\_ Anyone out there have any other good BIND or other Security
\_ solution stories to share?

Besides the obvious reasons to subscribe to Bugtraq, you occasionally
run across gems like (paraphrasing)

From: microsoft-security
Subject: another .HTR vulnerability

... In addition to the previous two .htr access vulnerabilities,
there is another that can be checked by ....

You'd like to think after *two* previous vulnerabilities, that they
would have peered at the code hard enough to root out others.

OMG, maybe they did. Eeeek.

David