Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 15 May 2001 17:13:45 +1000 (EST)
From:      Stephen Cimarelli <stephen@clari.net.au>
To:        "Dan Mahoney, System Admin" <danm@prime.gushi.org>
Cc:        questions@FreeBSD.ORG
Subject:   Re: onitoring named
Message-ID:  <XFMail.010515171345.stephen@clari.net.au>
In-Reply-To: <Pine.BSF.4.21.0105150137090.95126-100000@prime.gushi.org>

next in thread | previous in thread | raw e-mail | index | archive | help
have you looked at this 

http://www.isc.org/ml-archives/bind-users/2001/02/msg00842.html


On 15-May-01 Dan Mahoney, System Admin wrote:
> Please leave me out of these threads from here on in, as while watching
> your evangelical theological debate is fascinating, and wonderful for
> freebsd-philosophy@freebsd.org or letmelectureandbuymybook@freebsd.org, it
> really does little to answer the simple question "has anyone noticed any
> odd crashes under bind-8.2.3-REL without corefiles and often without
> syslog messages, and what has anyone done to correct them?"
> 
> Call me a greenhorn if you will, I'm used to getting reasonable answers
> from this list, so if I occasionally turn to it as a first resort because
> (A) Dejanews is jsut painful lately and (B) Many people on this list have
> had the "common" problems (and indeed, since I'm experiencing it on
> multiple servers on different networks, it's common, at least to me).
> 
> Thanks for all the Fish
> (In Memory of Douglas Adams)
> 
> -Dan Mahoney
> 
> On Mon, 14 May 2001, Kris Kennaway wrote:
> 
> 
> 
>> On Mon, May 14, 2001 at 10:23:28PM -0700, Ted Mittelstaedt wrote:
>> 
>> > >Both: >95% of the reported problems with named crashes on FreeBSD
>> > >lists in the past 4 months have been penetration attempts, or at least
>> > >occurred to people running vulnerable versions of named with symptoms
>> > >perfectly consistent to being attacked.  Therefore this is the best
>> > >initial diagnosis for people reporting problems with their named,
>> > >until they go further and rule it out by indicating that they're
>> > >already running 8.2.3-REL or a version of 9.x.  At that point more
>> > >detailed analysis is obviously required (which perhaps might be better
>> > >carried out on the bind support mailing lists).
>> > 
>> > The only problem with this statistic (assuming the 95% is
>> > accurate) is that for it to be a valid indicator, this would
>> > require that all the people having problems with bind
>> > did, in fact, query the FreeBSD lists first, instead of
>> > posting in the newsgroups or mailing lists.
>> 
>> Please note that I specifically did not say "95% of all people with
>> BIND problems", I qualified the statistic by restricting it to the
>> places I observed the data from, namely the FreeBSD lists.  I would
>> not, for example, extend this expectation to people reporting BIND
>> problems to the BIND support list, because it's clearly a different
>> domain.  It is only a valid indicator for a) FreeBSD support lists and
>> b) at the present time, until the trend substantially changes (maybe
>> in 6 months or so).
>> 
>> Kris
>> 
> 
> --
> 
> "Hitler, Satan, those Hanson kids, anything.  Just not the curious
> anteater."
> 
> -Peter Scolari, as Wayne Szalinki in "Honey, I Shrunk The Kids--The
> Series"
> 
> 
> --------Dan Mahoney--------
> Techie,  Sysadmin,  WebGeek
> Gushi on efnet/undernet IRC
> ICQ: 13735144   AIM: LarpGM
> Web: http://prime.gushi.org
> finger danm@prime.gushi.org 
> for pgp public key and tel#
> ---------------------------
> 
> 
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-questions" in the body of the message

----------------------------------
E-Mail: Stephen Cimarelli <stephen@clari.net.au>
Date: 15-May-01
Time: 17:12:51
ClariNet Internet Solutions
+61 3 9486 0811
www.clari.net.au
----------------------------------

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?XFMail.010515171345.stephen>