|
|
 |  |
Re: Possible DDoS Occurring Need AdviceFrom: Men & Mice Support Date: Friday, October 12, 2001
Time: 6:31:08 amAt 3:50 PM -0700 10/11/01, Jerry Pasker wrote:
>I think he's seeing a bug that I saw a few weeks ago. Once in my primary
>DNS, and once in another 'hidden' DNS server I was running in temp
>activation key mode, to take load off the primary. (experiment, to see if
>I could make the primary more reliable by removing load) A reboot fixed
>it. The server gets all stupid, and answers things it's authoritative for,
>but doesn't know how to find the root servers, or do any form of recursive
>resolving reliably. It would do SOME resolving for SOME clients. It was
>strange. I've never seen this behavior, until I went to the latest version
>of DNS Pro for classic.
>
>If it was a DoS (and it wasn't), it would have had to come from internally,
>since the DNS server was only known to the clients that my dial-up servers
>were referring to it.
>
>The worst thing about it, is that my DNS monitoring tool didn't catch it,
>since the DNS server still did zones it's authoritative for (it's secondary
>for all my internal domains, but it's not used by the outside internet),
>without any problems.
>
>Sounds like just another bug. My logs didn't show much of anything going on.
There shouldn't be "just another bug". When we find 'em, we fix 'em.
The problem you're describing could be caused by a cache corruption
bug we recently found and fixed in QuickDNS Server for Classic Mac
OS. The fix is in version 3.5.2 - everyone should update.
____________________________________________________________________
Chris Buxton Men & Mice
cbuxton@menandmice.com Making DNS Easy
|

Return to Digital Point Solutions' Home Page |