B0;261;0cHi there,
On Wed, 17 Oct 2012, Manson, John wrote:
Does this rise to the level of a DDoS attack?
82 queries in a second is modest, but you're in US government and that
IP is in China. Given the recent publicity, IMO that's probable cause.
I blackhole IPs that behave like this.
I
I recently setup a new dhcp server. In my logfiles yesterday I noticed the
following message:
BOOTP from dynamic client and no dynamic leases
I checked the mac addresses of these clients and thus far they are all
ipads, ipods or iphones. These devices have gotten ip's in the past. In
my dhcpd
Hi,
Running 4.1.1-P1 and we these also from iThings and androids. Tried to
verify if the ones doing it where jail broke or something else in common
but never got to the bottom of it. Enabling bootp, they continued to
ask. We just continue to deny bootp for subnets that have no need for it
and
Hi,
I'm working on a little product which relies on the RPZ facility of BIND,
and particularly on parsing the logs from BIND.
I am using the logging/channel facility in BIND to separate a log which
contains only
information relating to recursive queries which have been responded to
from an RPZ z
Great to hear Im not the only one seeing this. Havent seen any androids
yet. I dont think it is any that are jailbroke. One of the devices is
division owned so I know it isnt. Just crappy os's. The settings on the
ipads actually have a tab for bootp, but no way to change that.
ddh
On Thu,
I am running bind9.8.x built from source and I see this message in the logs
built with '--prefix=/blah' '--sbindir=/blah' '--sysconfdir=/blah'
'--localstatedir=/var' '--exec-prefix=/usr' '--libdir=/usr/lib'
'--mandir=/usr/share/man' '--with-openssl=/blah' '--enable-fixed-rrset'
'--enable-shared
On Oct 18, 2012, at 1:13 PM, Jack Tavares wrote:
> I am running bind9.8.x built from source and I see this message in the logs
> built with '--prefix=/blah' '--sbindir=/blah' '--sysconfdir=/blah'
> '--localstatedir=/var' '--exec-prefix=/usr' '--libdir=/usr/lib'
> '--mandir=/usr/share/man' '--
Let me be more specific.
Is there a way to tell named to not log this message?
Thank you
--
Jack Tavares
From: Warren Kumari [war...@kumari.net]
Sent: Thursday, October 18, 2012 10:18
To: Jack Tavares
Cc: Warren Kumari; bind-us...@isc.org
Subject: Re: Di
On Thu, 18 Oct 2012, Jack Tavares wrote:
> I am running bind9.8.x built from source and I see this message in the logs
> built with '--prefix=/blah' '--sbindir=/blah' '--sysconfdir=/blah'
> '--localstatedir=/var' '--exec-prefix=/usr' '--libdir=/usr/lib'
> '--mandir=/usr/share/man' '--with-opens
Hi All,
I'm hopping to get some feedback from people who use ISC Bind and DHCPD in
Active Directory environments.
Currently we use Bind/DHCPD for dynamic DNS and DHCP. It's been a pretty
stable service, redundant and we are polling statistics with Cacti. There is
concern by Management of usi
Some of my external facing nameservers are under attack, and the biggiest
fallout, is the machines goign into iowait from logging all the client
query denied syslog messages.
note: yes, recursion is turned off on these machines.
The current logging is a very vanilla
logging {
catego
On Thu, 18 Oct 2012, David Dowdle wrote:
> Some of my external facing nameservers are under attack, and the biggiest
> fallout, is the machines goign into iowait from logging all the client query
> denied syslog messages.
>
> note: yes, recursion is turned off on these machines.
>
> The current
On Oct 18 2012, Jeremy C. Reed wrote:
On Thu, 18 Oct 2012, Jack Tavares wrote:
I am running bind9.8.x built from source and I see this message in the logs
built with '--prefix=/blah' '--sbindir=/blah' '--sysconfdir=/blah' '--localstatedir=/var' '--exec-prefix=/usr' '--libdir=/usr/lib' '--mand
You should think of DNS hosting, DNS resolution and DHCP, as separate
services that can either be put together on a single platform, or run on
separate platforms in various combinations, interoperating with each
other. Another important factor is whether your AD domain is colocated
with a bunch
On 10/18/12 11:03 AM, Aaron Thompson wrote:
> Hi All,
>
> I'm hopping to get some feedback from people who use ISC Bind and DHCPD
> in Active Directory environments.
>
> Currently we use Bind/DHCPD for dynamic DNS and DHCP. It's been a
> pretty stable service, redundant and we are polling statis
Hi there,
On Thu, 18 Oct 2012, bind-users-requ...@lists.isc.org wrote:
ISC Bind in Active Directory (Aaron Thompson)
I'm hopping
Sometimes AD has that effect. :)
to get some feedback from people who use ISC Bind and DHCPD in
Active Directory environments.
I've been working on a client's
16 matches
Mail list logo