DNS attacks

Michael Varre mvarre at gmail.com
Fri Jul 25 23:28:45 UTC 2008


Sorry I meant to reply to all. What is the attack profile for this?



On 7/25/08, Kevin Darcy <kcd at chrysler.com> wrote:
> Wolfgang S. Rupprecht wrote:
>> James Kosin posted a message on the fedora mailing list that he is
>> actually seeing DNS attack messages in his log files.  The message is
>> archived here:
>>
>>  http://permalink.gmane.org/gmane.linux.redhat.fedora.general/306278
>>
>> Hopefully reports like this will get the folks to upgrade.
>>
> It's definitely a probe of some kind, but AFAICT a bunch of repeated
> queries for a *small* number of names, isn't the attack profile
> associated with the Kaminsky exploit.
>
> People should upgrade, of course. Even if the attacks aren't here yet,
> it's only a matter of time...
>
> - Kevin
>
>
>

-- 
Sent from Gmail for mobile | mobile.google.com





mv
315.952.5753


More information about the bind-users mailing list