On Tue, 20 Mar 2001, Dan McGinn-Combs spewed into the ether:
> We have experienced several attempts to kill our nameservers over the passed
> few weeks. The first one was successful. I've noticed in my logs that there
> are a number of hits against all our registered DNS boxes... typically a TCP
> attack looking for a reverse lookup in rapid succession. In an "older"
> version of BIND it apparently caused a NAMED to core dump.
Upgrade to Bind 8.2.3 or 9.x (the latest please, the previous one had
a buffer overflow). Refer to the isc.org homepage to find out current
status. Root exploits for bind 8.2.2x are known to be in the wild
Devdas Bhagat
--
The reward of a thing well done is to have done it.
-- Emerson
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
