List Info

Thread: Question on BlackHole DNS




Question on BlackHole DNS
user name
2006-09-10 23:19:45
I have two servers which have been upgraded to BIND 9.3.1. 
Both have 
similar named.conf configurations.  They are running
different versions 
of Mandriva (one is 10.1 and the other one is 2006).

On server starts up easily with the startup taking less than
20 seconds.

The older server is running a 2.4 kernel and does not
completed (at 
least not while monitoring the syslog) in less than 5
minutes. 

Any ideas what is going on?

-- 
Albert E. Whale, CHS CISA CISSP
Sr. Security, Network, Risk Assessment and Systems
Consultant
------------------------------------------------------------
-------
ABS Computer Technology, Inc. - www.ABS-CompTech.com
SPAM Zapper - No-JunkMail.com - Spam-Zapper.com - SPAM Stops
Here.

_______________________________________________
Bleeding-sigs mailing list
Bleeding-sigsbleedingsnort.com
http://lists.bleedingsnort.com/mailman/listinfo/ble
eding-sigs
Question on BlackHole DNS
user name
2006-09-11 02:30:44
What's load like on the box while it's working?

Are the config's identical?

Does the named process remain running, or core out? Do you have to kill it?

Matt


On 9/10/06, Albert E. Whale <abs-comptech.com">aewhaleabs-comptech.com> wrote:
I have two servers which have been upgraded to BIND 9.3.1.&nbsp; Both have
similar named.conf configurations.  They are running different versions
of Mandriva (one is 10.1 and the other one is 2006).

On server starts up easily with the startup taking less than 20 seconds.

The older server is running a 2.4 kernel and does not completed (at
least not while monitoring the syslog) in less than 5 minutes.

Any ideas what is going on?

--
Albert E. Whale, CHS CISA CISSP
Sr. Security, Network, Risk Assessment and Systems Consultant
-------------------------------------------------------------------
ABS Computer Technology, Inc. - www.ABS-CompTech.com
SPAM Zapper - No-JunkMail.com - Spam-Zapper.com - SPAM Stops Here.

_______________________________________________
Bleeding-sigs mailing list
bleedingsnort.com">Bleeding-sigsbleedingsnort.com
http://lists.bleedingsnort.com/mailman/listinfo/bleeding-sigs



--
Matt Jonkman
Bleeding Snort
http://www.bleedingsnort.com
Question on BlackHole DNS
user name
2006-09-11 03:08:12
Matt Jonkman wrote:
> What's load like on the box while it's working?
>
> Are the config's identical?
>
> Does the named process remain running, or core out? Do
you have to 
> kill it?
>
> Matt

The Configurations are identical.

The load average is under one (< 1.0), which I consider
normal

I have to kill the named process in order to get control
back.  If I 
comment out the include line for the BlackHole list, named
appears to 
operate normally.

Any suggestions?

-- 
Albert E. Whale, CHS CISA CISSP
Sr. Security, Network, Risk Assessment and Systems
Consultant
------------------------------------------------------------
-------
ABS Computer Technology, Inc. - www.ABS-CompTech.com
SPAM Zapper - No-JunkMail.com - Spam-Zapper.com - SPAM Stops
Here.

_______________________________________________
Bleeding-sigs mailing list
Bleeding-sigsbleedingsnort.com
http://lists.bleedingsnort.com/mailman/listinfo/ble
eding-sigs
[1-3]

about | contact  Other archives ( Real Estate discussion Medical topics )