DNS attacks

Kevin Darcy kcd at chrysler.com
Fri Jul 25 23:00:20 UTC 2008


Wolfgang S. Rupprecht wrote:
> James Kosin posted a message on the fedora mailing list that he is
> actually seeing DNS attack messages in his log files.  The message is
> archived here: 
>
>  http://permalink.gmane.org/gmane.linux.redhat.fedora.general/306278
>
> Hopefully reports like this will get the folks to upgrade.
>   
It's definitely a probe of some kind, but AFAICT a bunch of repeated 
queries for a *small* number of names, isn't the attack profile 
associated with the Kaminsky exploit.

People should upgrade, of course. Even if the attacks aren't here yet, 
it's only a matter of time...

- Kevin



More information about the bind-users mailing list