My master nameserver runs BIND 9.9, so I can do DNSSEC easily. I’ve installed from ports, but used the REPLACE_BASE option so that it overwrites the BIND 9.8.3 install included in the base system. That way I don’t have to worry about having multiple versions of the same command on different systems.
I patch this system via freebsd-update. After applying the latest security patches, I got the following email:
The following files will be updated as part of updating to 9.1-RELEASE-p3:
/usr/bin/dig
/...
Published on May 21, 2013 11:47