Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 10 Apr 2001 11:12:24 +0100
From:      Lee Smallbone <lee@kechara.net>
To:        freebsd-security@freebsd.org
Subject:   bind hack?
Message-ID:  <200104101122.MAA27594@mailgate.kechara.net>

next in thread | raw e-mail | index | archive | help
Hi,

 This is a little puzzling. I'm running the latest in the 'series 8' BIND, but every 24-48 hours, it dies, with this on the console:
 (latest example)

 Apr 10 08:02:11 uk-ns1 /kernel: pid 84 (named), uid 0: exited on signal 10 (core dumped)

 A few seconds prior the the above, the IDS logged this:

#20-(1-21575)	DNS named iquery attempt	2001-04-10 08:02:09   <source IP>	<box IP>		UDP

 The odd thing is, according to Whitehats, this attack only works on pre 8.1.2 / 4.9.8?

 Any input would be appreciated.

--

Lee Smallbone
Kechara Internet

lee@kechara.net
www.kechara.net 

Tel: (01243) 869 969
Fax: (01243) 866 685



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200104101122.MAA27594>