Date: Tue, 27 Feb 2001 20:03:55 -0500 From: Chris Faulhaber <jedgar@fxp.org> To: Leif Neland <leifn@neland.dk> Cc: Len Conrad <LConrad@Go2France.com>, freebsd-isp@FreeBSD.ORG Subject: Re: bind attacks, was: tinydns Message-ID: <20010227200355.A40022@peitho.fxp.org> In-Reply-To: <Pine.BSF.4.21.0102280157500.18136-100000@arnold.neland.dk>; from leifn@neland.dk on Wed, Feb 28, 2001 at 02:01:57AM %2B0100 References: <5.0.0.25.0.20010228000158.0436aeb0@mail.Go2France.com> <Pine.BSF.4.21.0102280157500.18136-100000@arnold.neland.dk>
next in thread | previous in thread | raw e-mail | index | archive | help
--2oS5YaxWCcQjTEyO Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Wed, Feb 28, 2001 at 02:01:57AM +0100, Leif Neland wrote: >=20 >=20 > On Wed, 28 Feb 2001, Len Conrad wrote: >=20 > >=20 > > >There you go. I'm 99.9% sure the upgrade will fix it. > >=20 > > Me, too, Troy. > >=20 > > After months of stability with 8.2.3 TxB on NT4 and 8.2.2p5 on=20 > > FreeBSD, in early Feb, I began having named stopping (I suspect=20 > > script kiddies just taking down every DNS they could find). > >=20 > The CERT advisories does not show any hole which just kills named. (If I > read correctly). >=20 > Is there any info for what has happened, and any way to try logging the ip > of somebody trying to do it, now everybody naturally has updated bind? >=20 It may be crashing due to the skript-kiddie using a Linux-specific exploit on a FreeBSD box... --=20 Chris D. Faulhaber - jedgar@fxp.org - jedgar@FreeBSD.org -------------------------------------------------------- FreeBSD: The Power To Serve - http://www.FreeBSD.org --2oS5YaxWCcQjTEyO Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.4 (FreeBSD) Comment: FreeBSD: The Power To Serve iEYEARECAAYFAjqcTnsACgkQObaG4P6BelB/wACglrmWYzXad2+ROo8H79bXh5B/ gHwAnRpwjcwFd3av551aHelwT/7CcUTU =IIGG -----END PGP SIGNATURE----- --2oS5YaxWCcQjTEyO-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010227200355.A40022>