I had an identical problem with a DNS server I maintain for a company...

It turned out that someone was hacking into the system and installing an IRC
bot (Eggdrop) and thereby killing named. Their files would somehow overwrite
it...

I was re-installing it from the RPM on a daily basis...

Using a standard /etc/rc.d/init.d/named start just resulted in a linefeed...

This went on for several days, until I started looking in the .bash_history
files and found everything which had been done.

The perpetrator had tried to cover their tracks, but missed this...

-JMS
[EMAIL PROTECTED]


-----Original Message-----
From: Vidiot [mailto:[EMAIL PROTECTED]]
Sent: Friday, February 25, 2000 2:47 PM
To: [EMAIL PROTECTED]
Subject: named keeps vanishing


Anyone have any idea why /usr/sbin/named would keeping disappearing from
the filesystem?  This all started about 24 hours ago.  I replaced it once
early this morning and had to do it again a little bit ago.

MB
--
e-mail: [EMAIL PROTECTED]
    Bart: Hey, why is it destroying other toys?  Lisa: They must have
    programmed it to eliminate the competition.  Bart: You mean like
    Microsoft?  Lisa: Exactly.  [The Simpsons - 12/18/99]
Visit - URL:http://www.vidiot.com/  (Your link to Star Trek and UPN)


--
To unsubscribe: mail [EMAIL PROTECTED] with "unsubscribe"
as the Subject.


-- 
To unsubscribe: mail [EMAIL PROTECTED] with "unsubscribe"
as the Subject.

Reply via email to