Date: Tue, 27 Feb 2001 20:03:55 -0500 From: Chris Faulhaber <jedgar@fxp.org> To: Leif Neland <leifn@neland.dk> Cc: Len Conrad <LConrad@Go2France.com>, freebsd-isp@FreeBSD.ORG Subject: Re: bind attacks, was: tinydns Message-ID: <20010227200355.A40022@peitho.fxp.org> In-Reply-To: <Pine.BSF.4.21.0102280157500.18136-100000@arnold.neland.dk>; from leifn@neland.dk on Wed, Feb 28, 2001 at 02:01:57AM %2B0100 References: <5.0.0.25.0.20010228000158.0436aeb0@mail.Go2France.com> <Pine.BSF.4.21.0102280157500.18136-100000@arnold.neland.dk>
index | next in thread | previous in thread | raw e-mail
[-- Attachment #1 --] On Wed, Feb 28, 2001 at 02:01:57AM +0100, Leif Neland wrote: > > > On Wed, 28 Feb 2001, Len Conrad wrote: > > > > > >There you go. I'm 99.9% sure the upgrade will fix it. > > > > Me, too, Troy. > > > > After months of stability with 8.2.3 TxB on NT4 and 8.2.2p5 on > > FreeBSD, in early Feb, I began having named stopping (I suspect > > script kiddies just taking down every DNS they could find). > > > The CERT advisories does not show any hole which just kills named. (If I > read correctly). > > Is there any info for what has happened, and any way to try logging the ip > of somebody trying to do it, now everybody naturally has updated bind? > It may be crashing due to the skript-kiddie using a Linux-specific exploit on a FreeBSD box... -- Chris D. Faulhaber - jedgar@fxp.org - jedgar@FreeBSD.org -------------------------------------------------------- FreeBSD: The Power To Serve - http://www.FreeBSD.org [-- Attachment #2 --] -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.4 (FreeBSD) Comment: FreeBSD: The Power To Serve iEYEARECAAYFAjqcTnsACgkQObaG4P6BelB/wACglrmWYzXad2+ROo8H79bXh5B/ gHwAnRpwjcwFd3av551aHelwT/7CcUTU =IIGG -----END PGP SIGNATURE-----help
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010227200355.A40022>