4 files changed, 6 insertions, 45 deletions

diff --git a/contrib/bind/doc/bog/00title.me b/contrib/bind/doc/bog/00title.me
index c9e708cdefe5c..be95d8b8ba181 100644
--- a/contrib/bind/doc/bog/00title.me
+++ b/contrib/bind/doc/bog/00title.me
@@ -57,7 +57,7 @@
 .b "Name Server Operations Guide"
 .b "for \s-1BIND\s+1"
 .sz
-\fIRelease 4.9.5\fP
+\fIRelease 4.9.3\fP
 .eh 'SMM:10-%''Name Server Operations Guide for \s-1BIND\s+1'
 .oh 'Name Server Operations Guide for \s-1BIND\s+1''\s-1SMM\s+1:10-%'
 .sp
diff --git a/contrib/bind/doc/bog/Makefile b/contrib/bind/doc/bog/Makefile
index 32456a075c061..09e1908ea6b62 100644
--- a/contrib/bind/doc/bog/Makefile
+++ b/contrib/bind/doc/bog/Makefile
@@ -62,9 +62,6 @@ ME=	-me
 NROFF=	nroff -rb3
 PRINTER= -Pdp
 TBL=	dtbl $(PRINTER)
-# For Linux:
-#PRINTER=
-#TBL=   tbl $(PRINTER)
 TROFF= ditroff $(PRINTER)
 GROFF= groff -Tps -t $(ME)
 
@@ -84,7 +81,6 @@ cat: $(FILES)
 
 clean:
 	rm -f *.psf *.lst *.BAK *.CKP *~ *.orig
-	rm -f file
 
 spell: $(FILES)
 	@for i in $(FILES); do \
diff --git a/contrib/bind/doc/bog/files.me b/contrib/bind/doc/bog/files.me
index b630eea4b3b41..ae755ff2fd1ce 100644
--- a/contrib/bind/doc/bog/files.me
+++ b/contrib/bind/doc/bog/files.me
@@ -543,7 +543,7 @@ resolver variable.  Supported options at this time are:
 sets the \s-1RES_DEBUG\s+1 bit in \fB_res.options\fP.
 .ip \fBndots:\fP\fIn\fP
 sets the lower threshold (measured in ``number of dots'') on names given to
-\fIres_query\fP() such that names with at least this number of dots will be
+\fIres_query\fP() such that names with more than this number of dots will be
 tried as absolute names before any \fIlocal-domain\fP or \fIsearch-list\fP
 processing is done.  The default for this internal variable is ``1''.
 .\" .pp
@@ -1046,10 +1046,6 @@ recognize it.
 
 .sh 2 "Discussion about the TTL"
 .pp
-The use of different Time To Live fields with in a RRset have been
-deprecated and this is enforced by the server when loading a primary
-zone.  See the Security section for more discussion of differing TTLs.
-.pp
 The Time To Live assigned to the records and to the zone via the
 Minimum field in the SOA record is very important. High values will
 lead to lower BIND network traffic and faster response time. Lower
diff --git a/contrib/bind/doc/bog/ns.me b/contrib/bind/doc/bog/ns.me
index b507e9420ddf2..ec3ca3c7988e1 100644
--- a/contrib/bind/doc/bog/ns.me
+++ b/contrib/bind/doc/bog/ns.me
@@ -1,3 +1,5 @@
+.\" ++Copyright++ 1986, 1988
+.\" -
 .\" Copyright (c) 1986, 1988
 .\"    The Regents of the University of California.  All rights reserved.
 .\" 
@@ -46,6 +48,8 @@
 .\" PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS
 .\" ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS
 .\" SOFTWARE.
+.\" -
+.\" --Copyright--
 .\"
 .\"	@(#)ns.me	6.3 (Berkeley) 9/19/89
 .\"
@@ -90,38 +94,3 @@ Berkeley would look as follows:
 .)b
 The top level domain for educational organizations is EDU;
 Berkeley is a subdomain of EDU and monet is the name of the host.
-.sh 1 Security
-.pp
-This section examines some of the know security implications of various
-versions of BIND. Some of these have been used to attack the nameservers
-in the past.
-.sh 2 "Unnecessary Glue"
-.pp
-Unnecessary glue can lead to incorrect records being loaded into the
-server. This can result in connections going to the wrong machines.
-.pp
-To prevent unnecessary glue being loaded, all the servers of zones being
-servered by a server and the servers of the parent zones need to be
-upgraded to BIND 4.9.3 or later.
-.sh 2 "Insertion of data into a zone that is being servered"
-.pp
-BIND versions prior to BIND 4.9.2 are subject to the insertion of
-resource records into zone that they are serving.
-.sh 2 "Denial of Service: Hash Bug Exploit"
-.pp
-September 1996 saw the COM TLD subject to a denial of service attack by
-injecting into the DNS a record with a final label of COM, eight spaces
-and COM. This effected BIND 4.9.4 servers. Similar attacks are possible
-on BIND 4.9.3 and BIND 4.9.3-P1. 
-.pp
-It is recommend that you run a BIND 4.9.4-P1 or later server to avoid
-this exploit.
-.sh 2 "Denial of Service: TTL Inconsistency Attacks"
-.pp
-If you are still using multiple TTL values within a RRset you can be
-subject to a denial of service attack. BIND 4.9.5 onwards uses multiple
-ttl values within a RRset to reject obviously bad RRset.
-.pp
-It is recommend that you upgrade to BIND 4.9.5 or later as these server
-prevent you loading multiple TTL values and doesn't merge answers received
-across the network.