Date: Sat, 12 May 2001 10:34:26 -0400 (EDT) From: "Dan Mahoney, System Admin" <danm@prime.gushi.org> To: Kris Kennaway <kris@obsecurity.org> Cc: questions@freebsd.org Subject: Re: onitoring named Message-ID: <Pine.BSF.4.21.0105121033100.39121-100000@prime.gushi.org> In-Reply-To: <20010511223649.A37725@xor.obsecurity.org>
next in thread | previous in thread | raw e-mail | index | archive | help
On Fri, 11 May 2001, Kris Kennaway wrote: > On Sat, May 12, 2001 at 01:17:56AM -0400, Dan Mahoney, System Admin wrote: > > Hi all. I noticed recently that I've had a high occurence of named dying > > on various machines. What would I put in a crontab to restart it only if > > it's not running? I'm not sure how to format the if statement. > > Aren't you at all worried WHY they're dying? I bet you're running > older versions than 8.2.3-RELEASE and you're suffering the effects of > (attempted, possibly successful) root penetration. 8.2.3-RELEASE, running as bind:bind, in a chroot jail. I've had four different nameds on four different nameservers die on me recently, running various freebsd variants. I think there may be a new exploit out. -Dan Mahoney > > Kris > -- "You're a thucking reyer!" -Richard Bozzello, who believed tongue piercing was painless. --------Dan Mahoney-------- Techie, Sysadmin, WebGeek Gushi on efnet/undernet IRC ICQ: 13735144 AIM: LarpGM Web: http://prime.gushi.org finger danm@prime.gushi.org for pgp public key and tel# --------------------------- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.21.0105121033100.39121-100000>