Simple Management for BIND / News: Recent posts

SQL Security Vulnerability

As you might have noticed, a security bug has been discovered in the way smbind sanitizes HTML input on the login page.

The bug is caused by a bad regex in the filter() function defined in all three version's (normal, view, and slave) include.php.

The fix is as follows:

--- php/src/include.php.orig 2010-09-08 21:14:31.000000000 -0400
+++ php/src/include.php 2010-09-08 21:14:59.000000000 -0400
@@ -93,8 +93,8 @@
}... read more

Posted by blentz 2010-09-09

smbind-0.4.7 released

smbind-0.4.7 has been released. Smbind is a PHP-based tool for managing DNS zones for BIND via the web. Supports per-user administration of zones, error checking, and a PEAR DB database backend.

This is a bugfix and user interface improvement release.

This new version contains several usability improvements to make more efficient use of the pages. The confirmation dialogs for each modification have been removed (deletions still prompt). For example, the record list for a zone now displays records added or removed immediately after using Save.... read more

Posted by blentz 2007-01-20

smbind-0.4.6 released

smbind-0.4.6 has been released. Smbind is a PHP-based tool for managing DNS zones for BIND via the web. Supports per-user administration of zones, error checking, and a PEAR DB database backend.

This is a code maintenance release.

A number of updates have been included in this release for both smbind and smbind-slave. This should close all the self-opened bug tracker items that have been posted since the last release, including improvements in the src/configtest.php configuration test page, record sorting issues, the incorrect ability to delete the built-in admin user, and a change in the default username used for the database connection. See the CHANGELOG for full details.... read more

Posted by blentz 2006-11-13

smbind-0.4.5 released

smbind-0.4.5 has been released. Smbind is a PHP-based tool for managing DNS zones for BIND via the web. Supports per-user administration of zones, error checking, and a PEAR DB database backend.

This is a code maintenance release.

A number of updates have been included in this release for both smbind and smbind-slave. The biggest change is a code restructuring where each individual function has been exploded out of the overgrown index file into separate files in src/, much like Squirrelmail. This should make patch contributions and code maintenance a little less of a headache. ... read more

Posted by blentz 2006-09-15

smbind-0.4.4 released

Smbind-0.4.4 has been released. Smbind is a PHP-based tool for managing DNS zones for BIND via the web. Supports per-user administration of zones, error checking, and a PEAR DB database backend.

This is a bugfix release.

A number of fixes have been included in this release for both smbind and smbind-slave. A problem with user delegation of zones was fixed (thanks to an anonymous SF user report), along with a minor fix for zone deletion, which wasn't getting committed to the config file as expected. Deleting a user was supposed to transfer ownership from that user over to the admin user, but was broken because of the expected admin user's id in the database. A few documentation updates and grammatical changes have also been made.... read more

Posted by blentz 2006-07-14

smbind-0.4.3 released

Pair of changes that have been waiting in the wings for while; One allows the login form to pop the cursor into the username field, for those of you who don't like to move the mouse, and another change /dev/nulling the output from rndc reload.

Posted by blentz 2006-05-10

smbind-0.4.2 released

A trio of bugfixes is included in this release.

Posted by blentz 2006-05-08

smbind-0.4.1 released

A pair of minor bugfixes.

Posted by blentz 2005-10-06

Demo added to Project Home Page

I've configured a demo version of smbind at http://smbind.sourceforge.net/ If prompted to login, just use admin/admin. I've added a few sourceforge-related DNS entries to give an evaluator the idea of what both forward and reverse lookup zones look like in smbind.

Posted by blentz 2005-05-16

smbind-slave 0.4 released

smbind 0.4 released along with smbind-slave 0.4. Now with a new interface. Please check out the screenshots.

Posted by blentz 2005-05-12

smbind-0.4 released

A few bug fixes, major UI improvements (check out the screen shots), better documentation, and RFC1912 compliant out of the box. More rndc status feedback and bad record status display. Works with a chroot jail configuration. New configtest.php (ala squirrelmail) will help verify your installation. Extra options moved from config.php into SQL.

Posted by blentz 2005-05-11

smbind addons released/successful testing

Two new packages have been released to extend the functionality of the original smbind package.

smbind-slave is meant for use on a slave DNS server that does zone transfers from a master. Enjoy the same easy-to-use interface for managing your slave servers as you do for managing your masters.

smbind-view is an addon interface for smbind that allows anonymous viewing of of read-only zone data, where being secured with a firewall or htaccess files. Allow other members of your department to browse zone information from the comfort of a web interface, without having to give them full-blown accounts or the hassle and security risk of allowing zone transfers.... read more

Posted by blentz 2004-05-06

smbind-0.3.1 released

Smbind is a PHP-based tool for managing zone and configuration files for BIND9. With this new release zone data is verified using the named-checkconf and named-checkzone utilties. The backend database interface has been rewritten entirely in PHP, using the PEAR-DB interface included with most PHP installations. BIND configuration changes can be applied on-the-fly to the daemon from the web interface using a new 'Commit Changes' link. Other bug fixes and smaller improvements have been made also.

Posted by blentz 2004-05-06