The ISC Website (www.isc.org) was recently compromised and was found to be serving malware.

2014-12-29 Thread Michael McNally
Last week ISC received a report from security firm Cyphort Labs informing us that our website, www.isc.org, was delivering malware content to visitors. Here is a summary of what we know and what we believe to be true about this incident. What we know to a high degree of confidence: + Securit

Re: Strange DLZ issues

2014-12-29 Thread Mukund Sivaraman
Hi Lars On Mon, Dec 29, 2014 at 10:57:57AM +0100, Lars Hanke wrote: > Dec 29 10:29:20 verdandi named[2522]: samba_dlz: starting configure > Dec 29 10:29:20 verdandi named[2522]: samba_dlz: configured writeable zone > '10.16.172.in-addr.arpa.' > Dec 29 10:29:20 verdandi named[2522]: samba_dlz: conf

Re: Strange DLZ issues

2014-12-29 Thread Karl Auer
On Mon, 2014-12-29 at 10:57 +0100, Lars Hanke wrote: > Ooops! It fails on the zone added first! And what does it want to tell > me by "already exists"? > Any ideas how to troubleshoot the issue? Inspect your input files very carefully. That smells like a cut and paste error to me. Regards, K. -

Strange DLZ issues

2014-12-29 Thread Lars Hanke
Following the last Debian Jessie update, my Samba attached bind ceased working. Since there was no Samba update, the DLZ libs were unchanged, as was the configuration. I'm now running BIND 9.9.5-7-Debian, which imports zones from a Samba4 installation. Actually, Samba is expected to only serve

Re: BIND9 Return different IP address based on subnet

2014-12-29 Thread Matus UHLAR - fantomas
On 28.12.14 19:59, Christian Kette wrote: Thank you for the helpful answer. I changed the file /etc/bind/named.conf.local to [...] view "ext" { match-clients { 192.168.2.0/24;}; zone "2.168.192.in-addr.arpa" { type master; file "/etc/bind/db.rev.2.168.192.in-addr.arpa"; }