Re: Observation on FC2/Help on FC1

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



[ erased all content because it is nearly unreadable and I have no
patience now to wrap all lines so that a proper quoting is possible ]

Usman Yahaya,

please use a mail client which does produce proper list mails. Do not
send HTML formated mails to this list. I am unwilling to reformat the
mail to quote what you said.

And DO NOT exchange the reply-to address! I saw too late that my first
reply went to you personally and not as a reply to the list address.

If you only run a bind DNS server on the suspicious FC1 host, then check
it's log files. If you run bind chrooted, then the logs are under
/var/named/chroot/var/log/. If non chrooted they are under /var/log/. To
determine which bind your run you can use rpm

rpm -qa | grep bind

or nslookup

nslookup -q=txt -class=CHAOS version.bind. 0

or dig

dig @YOUR_NAME_SERVER version.bind CHAOS txt

"named -v" does it too.

With a broken DNS setup it is possible that the DNS server constantly
queries other DNS servers. You should that see from the logs. Run tools
like tcpdump or ethereal to check the traffic the host produces on a raw
level.

Alexander


-- 
Alexander Dalloz | Enger, Germany | GPG key 1024D/ED695653 1999-07-13
Fedora GNU/Linux Core 2 (Tettnang) kernel 2.6.8-1.521smp 
Serendipity 18:09:02 up 11 days, 15:25, load average: 1.72, 0.57, 0.37 

Attachment: signature.asc
Description: Dies ist ein digital signierter Nachrichtenteil


[Index of Archives]     [Current Fedora Users]     [Fedora Desktop]     [Fedora SELinux]     [Yosemite News]     [Yosemite Photos]     [KDE Users]     [Fedora Tools]     [Fedora Docs]

  Powered by Linux