Date: Tue, 15 May 2001 01:43:11 -0400 (EDT) From: "Dan Mahoney, System Admin" <danm@prime.gushi.org> To: Kris Kennaway <kris@obsecurity.org> Cc: Ted Mittelstaedt <tedm@toybox.placo.com>, John Baxter <jbaxter@mmcable.com>, questions@FreeBSD.ORG Subject: Re: onitoring named Message-ID: <Pine.BSF.4.21.0105150137090.95126-100000@prime.gushi.org> In-Reply-To: <20010514222845.C95631@xor.obsecurity.org>
next in thread | previous in thread | raw e-mail | index | archive | help
Please leave me out of these threads from here on in, as while watching your evangelical theological debate is fascinating, and wonderful for freebsd-philosophy@freebsd.org or letmelectureandbuymybook@freebsd.org, it really does little to answer the simple question "has anyone noticed any odd crashes under bind-8.2.3-REL without corefiles and often without syslog messages, and what has anyone done to correct them?" Call me a greenhorn if you will, I'm used to getting reasonable answers from this list, so if I occasionally turn to it as a first resort because (A) Dejanews is jsut painful lately and (B) Many people on this list have had the "common" problems (and indeed, since I'm experiencing it on multiple servers on different networks, it's common, at least to me). Thanks for all the Fish (In Memory of Douglas Adams) -Dan Mahoney On Mon, 14 May 2001, Kris Kennaway wrote: > On Mon, May 14, 2001 at 10:23:28PM -0700, Ted Mittelstaedt wrote: > > > >Both: >95% of the reported problems with named crashes on FreeBSD > > >lists in the past 4 months have been penetration attempts, or at least > > >occurred to people running vulnerable versions of named with symptoms > > >perfectly consistent to being attacked. Therefore this is the best > > >initial diagnosis for people reporting problems with their named, > > >until they go further and rule it out by indicating that they're > > >already running 8.2.3-REL or a version of 9.x. At that point more > > >detailed analysis is obviously required (which perhaps might be better > > >carried out on the bind support mailing lists). > > > > The only problem with this statistic (assuming the 95% is > > accurate) is that for it to be a valid indicator, this would > > require that all the people having problems with bind > > did, in fact, query the FreeBSD lists first, instead of > > posting in the newsgroups or mailing lists. > > Please note that I specifically did not say "95% of all people with > BIND problems", I qualified the statistic by restricting it to the > places I observed the data from, namely the FreeBSD lists. I would > not, for example, extend this expectation to people reporting BIND > problems to the BIND support list, because it's clearly a different > domain. It is only a valid indicator for a) FreeBSD support lists and > b) at the present time, until the trend substantially changes (maybe > in 6 months or so). > > Kris > -- "Hitler, Satan, those Hanson kids, anything. Just not the curious anteater." -Peter Scolari, as Wayne Szalinki in "Honey, I Shrunk The Kids--The Series" --------Dan Mahoney-------- Techie, Sysadmin, WebGeek Gushi on efnet/undernet IRC ICQ: 13735144 AIM: LarpGM Web: http://prime.gushi.org finger danm@prime.gushi.org for pgp public key and tel# --------------------------- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.21.0105150137090.95126-100000>