Fedora Users — Re: DNS Attacks

Wolfgang S. Rupprecht wrote:

James Kosin <jkosin@xxxxxxxxxxxxxxxxxx> writes:

   client 143.215.143.11 query (cache) 'com/ANY/IN' denied: 30 Time(s)
   client 143.215.143.11 query (cache) 'gmail.com/ANY/IN' denied: 32
Time(s)
   client 143.215.143.11 query (cache) 'hotmail.com/ANY/IN' denied: 31


Thanks for posting.  Maybe this will light a fire under the folks that
haven't upgraded yet.

Did you have to turn any extra logging on to get these message?

-wolfgang

No, these are sent every day by logwatch. I'm running a server 24/7; sologwatch runs as a cronjob.

But, the patches out don't fix the issue totally. That would require acomplete re-write of the DNS and how DNS works. This is somethingalready in the works.The patch just makes it more difficult to trigger the issue. I'm usingthe patched version of 9.4.2-P1.


Just look at your root email, if you check it or leave the computer ON 24/7.

James

Attachment: signature.asc
Description: OpenPGP digital signature

-- 
fedora-list mailing list
fedora-list@xxxxxxxxxx
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list