DOS of named

[Kris Kennaway]

On Thu, Dec 18, 2003 at 12:58:41PM +0100, Robert Eckardt wrote:
> On Tue, 16 Dec 2003 20:28:10 -0800, Kris Kennaway wrote
> > On Tue, Dec 16, 2003 at 10:01:33PM +0100, Robert Eckardt wrote:
> > > Hi,
> > > 
> > > what measures can I take against this irregular appearing Denial-Of-Service
> > > attacks of named which is filling my logfiles (messages, daemon, all.log)
> > > with messages like "sysquery: no addrs found for root NS" for minutes at
> > > a rate of 4000 lines/sec?
> > > 
> > > I'm using named 8.3.3-REL on FBSD-5.0R.
> > 
> > Both are very old and have a number of known problems.  Upgrade to 
> > the latest versions.
> 
> Hi Kris,
> 
> You can't be serious. :-)

I was; if you're complaining about bugs in old versions of the
software, then the first thing to do is check whether those bugs have
been fixed in later versions.  Not all bug fixes are properly
documented.

> And as far as named is concerned: From looking at the discussion
> on their mailing list this problem happens for a wide variety of
> releases on different operating systems, but with no one having
> the intention to fix it. (I even found the question I asked more
> than 7 years ago on this list to the very same problem. At that
> time the computers just weren't fast enough to write 4000 lines/sec.)
> Thus, I cannot accept the simple call for the new release.

OK, so you've done some further research about this (or just omitted
this from the original message).  The BIND mailing list may still be
your best bet for discussion of this issue, despite previous lack of
solution there.

Kris
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-questions/attachments/20031218/6f8d57aa/attachment.bin