Tue Dec 22, 2015 10:42 am
"do not use bind or dnsmasq" was Excellent advice in last ~12years atleast.
even before code become More and MORE bloated and buggy, even before Phyton-written abominations become cornerstone of UB-NG.
so DJBDNS, UNBOUND or NSD was eventually become your best friend aswell as some other closed-source things, sometimes.
for nearly 25yrs all ISC-affected/guided/made things/software become/remain quite insecure and same exploitations was used since DNS creation, thus with ample impact/damage.