Date: Fri, 1 May 1998 22:24:41 -0400 From: Chris Peltier <CPELTIER@iectech.com> To: "'William Wong'" <wwong@wiley.csusb.edu> Cc: "'freebsd-questions@FreeBSD.ORG'" <freebsd-questions@FreeBSD.ORG>, "'freebsd-isp@FreeBSD.ORG'" <freebsd-isp@FreeBSD.ORG> Subject: RE: named catching sig 11's Message-ID: <98May1.181445edt.6196@netgate.iectech.com>
next in thread | raw e-mail | index | archive | help
I suspect that it is the CNAME recursion bug that is being
exploited. Our primary name server's processor usage logged
heavy CPU activity and gobbled up all available memory over
a several hour period. Our secondary with much less memory
died within 30 minutes of the attack. I here this exploit is going
around.
Sincerely,
Chris Peltier
* email: CPeltier@NetCarrier.com
* voice: 215-257-4917
* FAX: 215-257-4916
>----------
>From: William Wong[SMTP:wwong@wiley.csusb.edu]
>Sent: Friday, May 01, 1998 8:24 PM
>To: freebsd-questions@FreeBSD.ORG
>Subject: named catching sig 11's
>
>
>Hi all,
>
>All of a sudden our DNS servers are catching sig 11's, primary as well
>as
>secondaries. Any clue as to what's going on? These machines are
>running
>2.2.5-stable's. Other DNS servers on different subnets are
>experiencing
>the same symptoms.
>
>--
>William Wong
>wwong@wiley.csusb.edu
>
>
>To Unsubscribe: send mail to majordomo@FreeBSD.org
>with "unsubscribe freebsd-questions" in the body of the message
>
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?98May1.181445edt.6196>