Date: Mon, 12 Feb 2001 09:44:25 -0500 From: Scott Hyjek <SHyjek@rbmg.com> To: "'freebsd-questions@FreeBSD.ORG'" <freebsd-questions@FreeBSD.ORG> Subject: Question: bind / named problem Message-ID: <C7C1A68CCDF6D311BFE000508B95B48C02E5250C@apollo.rbmg.com>
next in thread | raw e-mail | index | archive | help
This message is in MIME format. Since your mail reader does not understand this format, some or all of this message may not be legible. ------_=_NextPart_001_01C09502.4BBD1510 Content-Type: text/plain; charset="iso-8859-1" Any information or guidance would be appreciated. We've experienced a problem on our external DNS twice now (last thursday and Sunday). Name resolution ceases and we receive the following: quentin/kernel: pid 104 (named), uid 0: exited on signal 6 (core dumped) This server has run fine for many many months and we've only recently (as above) encountered this problem. No hardware or software changes have occured. Lastly, we're aware of the current Bind vulnerability and plan to upgrade to eliminate it. However, we'd like some guidance (if any is available) as to how to determine if we've been exploited in such a manner. Thanks. <scott> Scott Hyjek "Little Man...Big Attitude" Network Engineering 803-741-3101 ------_=_NextPart_001_01C09502.4BBD1510 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN"> <HTML> <HEAD> <META HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; = charset=3Diso-8859-1"> <META NAME=3D"Generator" CONTENT=3D"MS Exchange Server version = 5.5.2653.12"> <TITLE>Question: bind / named problem</TITLE> </HEAD> <BODY> <P><FONT SIZE=3D2 FACE=3D"Arial">Any information or guidance would be = appreciated. We've experienced a problem on our external DNS twice now = (last thursday and Sunday). Name resolution ceases and we receive the = following:</FONT><FONT FACE=3D"Times New Roman"> </FONT></P> <P><FONT SIZE=3D2 FACE=3D"Arial">quentin/kernel: pid 104 (named), uid = 0: exited on signal 6 (core dumped)</FONT><FONT FACE=3D"Times New = Roman"> </FONT> <BR><FONT SIZE=3D2 FACE=3D"Arial">This server has run fine for many = many months and we've only recently (as above) encountered this = problem. No hardware or software changes have occured.</FONT> </P> <P><FONT SIZE=3D2 FACE=3D"Arial">Lastly, we're aware of the current = Bind vulnerability and plan to upgrade to eliminate it. However, we'd = like some guidance (if any is available) as to how to determine if = we've been exploited in such a manner. Thanks.</FONT><FONT = FACE=3D"Times New Roman"> </FONT></P> <P><FONT SIZE=3D2 FACE=3D"Arial"><scott></FONT> </P> <P><FONT SIZE=3D2 FACE=3D"Arial">Scott Hyjek</FONT> <BR><FONT SIZE=3D2 FACE=3D"Arial">"Little Man...Big = Attitude"</FONT> <BR><FONT SIZE=3D2 FACE=3D"Arial">Network Engineering</FONT> <BR><FONT SIZE=3D2 FACE=3D"Arial">803-741-3101</FONT> </P> </BODY> </HTML> ------_=_NextPart_001_01C09502.4BBD1510-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?C7C1A68CCDF6D311BFE000508B95B48C02E5250C>