Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 04 May 2001 08:17:00 -0500
From:      Eric Anderson <anderson@centtech.com>
To:        Andrew Barros <abarros@tjhsst.edu>
Cc:        "lists@mail.ru" <lists@mail.ru>, freebsd-security@freebsd.org
Subject:   Re: reverse or not
Message-ID:  <3AF2ABCC.B5776288@centtech.com>
References:  <5.0.2.1.2.20010503145244.00a12e50@nol.co.za> <Pine.BSF.4.30.0105031358300.26752-100000@R181204.resnet.ucsb.edu> <20010503170027.B9233@tjhsst.edu> <3AF1DC23.32BB39B3@globalstar.com> <3AF23077.55DEA3D8@mail.ru> <20010504084039.G9233@tjhsst.edu> <20010504155725.Q13382@ringworld.oblivion.bg> <20010504090432.H9233@tjhsst.edu>

next in thread | previous in thread | raw e-mail | index | archive | help
I think if you have (in your /etc/host.conf) bind listed before hosts
(meaning it will ask the dns server before looking at the hosts file),
it would delay if the dns server doesn't have a reverse entry for
127.0.0.1, which would take a long time.. But it still doesn't sound
right.. I had some similar problems with ssh, and patched it, which
fixed the (similar) problem for me..

Eric

Andrew Barros wrote:
> 
> Yes, ns1.tjhsst.edu is on the same ethernet segment as the box.
> 
> 127.0.0.1 is in /etc/hosts
> 
>         -ajb
> On Fri, May 04, 2001 at 03:57:25PM +0300, Peter Pentchev wrote:
> ->On Fri, May 04, 2001 at 08:40:39AM -0400, Andrew Barros wrote:
> ->>
> ->> There are two things that I'm sure of
> ->>
> ->>     1) The boxes have correct reverse DNS
> ->>
> ->>     2) They use ns1.tjhsst.edu as their nameserver(a different box)
> ->>             which has the correct reverse DNS
> ->>
> ->> The problem is that while these things are true, and out T1 is up
> ->> it works normally. When the T1 goes out, it takes a _long_ time. Telnet
> ->> ,however, is unaffected by this.
> ->
> ->When you say 'correct reverse DNS', you do mean 127.0.0.1 too, right?
> ->And (a stupid question, but one that needs asking nevertheless) ns1.tjhsst.edu
> ->is reachable when your T1 goes down, right?
> ->
> ->G'luck,
> ->Peter
> ->
> ->--
> ->If there were no counterfactuals, this sentence would not have been paradoxical.
> ---end quoted text---
> 
> --
> Andrew Barros <abarros@tjhsst.edu>
> PGP Key Fingerprint:
> D3B8 0800 C45A 143E 5CF0  E112 0A1B AB36 B655 1FB8
> 
>   ------------------------------------------------------------------------
>    Part 1.2Type: application/pgp-signature

-- 
-------------------------------------------------------------------------------
Eric Anderson	 anderson@centtech.com    Centaur Technology    (512)
418-5792
The idea is to die young as late as possible.
-------------------------------------------------------------------------------

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3AF2ABCC.B5776288>