How to compile named(bind) ?

Advanhost Support

• August 16, 2024 06:23

Hi, everyone, recently my nameserver(DNS Only installed with bind) was under amplification attack, there are 99% REFUSED responses as they request a lots of invaild domains(not authority domain in my nameserver). I had drop this REFUSED responses via iptables rules, but the performance of iptables is not so good, and some of rules can not use in AlmaLinux 9.x as iptables-u32 module is missing. So I want to downlod the cPanel bind rpm source package, and recompile the bind to drop the REFUSED response directly. Could anyone tell me where can I download cPanel bind RPM source package ? or any document about recompile the RPM package ?

• 

  cPRex Jurassic Moderator

  • August 16, 2024 14:20

  Hey there!  cPanel actually doesn't do anything special with the Bind packages as we pull those straight from the OS provider:

  # rpm -qa | grep -i bind
  bind-utils-9.11.36-14.el8_10.x86_64
  bind-9.11.36-14.el8_10.x86_64
  bind-libs-lite-9.11.36-14.el8_10.x86_64
  bind-devel-9.11.36-14.el8_10.x86_64
  cpanel-bindp-1.0.0-1.cp108~el8.x86_64
  rpcbind-1.2.5-10.el8.x86_64
  bind-libs-9.11.36-14.el8_10.x86_64
  bind-license-9.11.36-14.el8_10.noarch
  python3-bind-9.11.36-14.el8_10.noarch
  bind-export-libs-9.11.36-14.el8_10.x86_64
  bind-lite-devel-9.11.36-14.el8_10.x86_64

  That cpanel-bindp is something we use to bind our services to a port, and unrelated to BIND/DNS in any way.

  This means you can just pull the package from your system or OS provider and work from there, although I don't have any specific guides on how you would perform that custom work.

  0
• 

  Advanhost Support

  • August 18, 2024 02:53

  Hi cPRex, thanks very much for you information.

  0
• 

  cPRex Jurassic Moderator

  • August 19, 2024 14:21

  Sure thing!

  0

Please sign in to leave a comment.