From owner-freebsd-isp Tue Feb 27 17: 3:59 2001 Delivered-To: freebsd-isp@freebsd.org Received: from peitho.fxp.org (peitho.fxp.org [209.26.95.40]) by hub.freebsd.org (Postfix) with ESMTP id 1872937B719 for ; Tue, 27 Feb 2001 17:03:56 -0800 (PST) (envelope-from cdf.lists@fxp.org) Received: by peitho.fxp.org (Postfix, from userid 1501) id BB2AD1360C; Tue, 27 Feb 2001 20:03:55 -0500 (EST) Date: Tue, 27 Feb 2001 20:03:55 -0500 From: Chris Faulhaber To: Leif Neland Cc: Len Conrad , freebsd-isp@FreeBSD.ORG Subject: Re: bind attacks, was: tinydns Message-ID: <20010227200355.A40022@peitho.fxp.org> References: <5.0.0.25.0.20010228000158.0436aeb0@mail.Go2France.com> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-md5; protocol="application/pgp-signature"; boundary="2oS5YaxWCcQjTEyO" Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: ; from leifn@neland.dk on Wed, Feb 28, 2001 at 02:01:57AM +0100 Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org --2oS5YaxWCcQjTEyO Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Wed, Feb 28, 2001 at 02:01:57AM +0100, Leif Neland wrote: >=20 >=20 > On Wed, 28 Feb 2001, Len Conrad wrote: >=20 > >=20 > > >There you go. I'm 99.9% sure the upgrade will fix it. > >=20 > > Me, too, Troy. > >=20 > > After months of stability with 8.2.3 TxB on NT4 and 8.2.2p5 on=20 > > FreeBSD, in early Feb, I began having named stopping (I suspect=20 > > script kiddies just taking down every DNS they could find). > >=20 > The CERT advisories does not show any hole which just kills named. (If I > read correctly). >=20 > Is there any info for what has happened, and any way to try logging the ip > of somebody trying to do it, now everybody naturally has updated bind? >=20 It may be crashing due to the skript-kiddie using a Linux-specific exploit on a FreeBSD box... --=20 Chris D. Faulhaber - jedgar@fxp.org - jedgar@FreeBSD.org -------------------------------------------------------- FreeBSD: The Power To Serve - http://www.FreeBSD.org --2oS5YaxWCcQjTEyO Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.4 (FreeBSD) Comment: FreeBSD: The Power To Serve iEYEARECAAYFAjqcTnsACgkQObaG4P6BelB/wACglrmWYzXad2+ROo8H79bXh5B/ gHwAnRpwjcwFd3av551aHelwT/7CcUTU =IIGG -----END PGP SIGNATURE----- --2oS5YaxWCcQjTEyO-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message