From owner-freebsd-questions Wed Mar 14 9:30: 0 2001 Delivered-To: freebsd-questions@freebsd.org Received: from mail.nbrewer.com (sparge.nbrewer.com [208.42.68.70]) by hub.freebsd.org (Postfix) with ESMTP id 2662D37B718 for ; Wed, 14 Mar 2001 09:29:57 -0800 (PST) (envelope-from chris@nbrewer.com) Received: by mail.nbrewer.com (Postfix, from userid 1001) id A4DA2383071; Wed, 14 Mar 2001 11:29:55 -0600 (CST) Date: Wed, 14 Mar 2001 11:29:55 -0600 From: Christopher Farley To: Gareth Otte Cc: freebsd-questions@FreeBSD.ORG Subject: Re: DNS error Message-ID: <20010314112953.A89833@northernbrewer.com> Mail-Followup-To: Christopher Farley , Gareth Otte , freebsd-questions@FreeBSD.ORG References: <003f01c0ac6e$ffaa3a20$d97a0bc4@gotte> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: <003f01c0ac6e$ffaa3a20$d97a0bc4@gotte>; from gotte@elcb.co.za on Wed, Mar 14, 2001 at 12:10:16PM +0200 Organization: Northern Brewer, St. Paul, MN Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG Gareth Otte (gotte@elcb.co.za) wrote: > Periodically I receive an error stating that 'named PID 141 exited on signal > 11. Core dumped' > I know that this is DNS error, but what does signall 11 mean and how can I > get more info as to what caused the problem. > In order to get the DNS up and running again, I issue the command NDC RELOAD > or NDC RESTART. What does 'named -v' say? If you are running anything prior to 8.2.3-REL (ie: 8.2.3-T2B), this may be the result of someone trying (possibly succeeding?) to exploit a security vulnerability. My nameserver was hit 14 days after the announcement, and if I recall, it exited on a signal 11. That I was hit so soon after the announcement leads me to believe this vulnerability is being quite actively exploited. Otherwise, if you are running 8.2.3-REL or 9, it's probably something else! See the official advisory for more info. ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01%3A18.bind.asc -- Christopher Farley www.northernbrewer.com To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message