In article ,
Gregory Hicks wrote:

> > Subject: RE: Named errors
> > Date: Wed, 28 Jun 2006 13:21:07 -0400
> > From: "Jeff Lightner"
> > To: , "Kevin Darcy"
> > Cc:
> >
> > Well now it IS broke ain't it?
> >
> > If you tell them the most likely cause is that you were hacked that in
> > tandem with the fact it is not working properly should get them to let
> > you upgrade.
>
> Actually, I'd put it more 'diplomatically' as in:
>
> " The Bind that we are using is WELL past its "use-by" date. I need to
> upgrade to a much later version. although I cannot positively state
> that our name server has been hacked, everything I have now points to
> that.

Where are you getting the idea that his log messages point to that?
"Bad referrel" errors indicate problems on other servers, not problems
on your own. Akamai also pulls some funny games with DNS to implement
their global load balancing, and these often result in complaints from
DNS servers.

So if you're suggesting that Jeff lie to his bosses to get them to let
him upgrade, at least be honest about it.

--
Barry Margolin, barmar@alum.mit.edu
Arlington, MA
*** PLEASE post questions in newsgroups, not directly to me ***
*** PLEASE don't copy me on replies, I'll read them in the group ***

Everyone,
Thanks for all your suggestions. I will have to eventually upgrade, but
moving off Solaris 7 will have to wait as they are running some software
no longer supported by Sun, but works great still.

I had my Windows NT and 2000 servers turn off the forwarders. This
cleaned up the problem right away. I am sure that there is a way to
accept forwarding from these servers correct? Is there a setting in the
named.conf file I need to fix or can someone point me to some docs to read?

Gary D Lopez
Unix Systems Administrator
Catapult Communications
160 S Whisman Rd
Mountain View, CA 94041
Ph (650) 314-1029
Fax (650) 960-1029


Barry Margolin wrote:
> In article ,
> Gregory Hicks wrote:
>
>>> Subject: RE: Named errors
>>> Date: Wed, 28 Jun 2006 13:21:07 -0400
>>> From: "Jeff Lightner"
>>> To: , "Kevin Darcy"
>>> Cc:
>>>
>>> Well now it IS broke ain't it?
>>>
>>> If you tell them the most likely cause is that you were hacked that in
>>> tandem with the fact it is not working properly should get them to let
>>> you upgrade.
>> Actually, I'd put it more 'diplomatically' as in:
>>
>> " The Bind that we are using is WELL past its "use-by" date. I need to
>> upgrade to a much later version. although I cannot positively state
>> that our name server has been hacked, everything I have now points to
>> that.
>
> Where are you getting the idea that his log messages point to that?
> "Bad referrel" errors indicate problems on other servers, not problems
> on your own. Akamai also pulls some funny games with DNS to implement
> their global load balancing, and these often result in complaints from
> DNS servers.
>
> So if you're suggesting that Jeff lie to his bosses to get them to let
> him upgrade, at least be honest about it.
>

In any case I say download the 9.3.2 source, compile, and use that
instead. It takes about a couple of minutes. Run named-checkconf
against your named.conf and correct any errors. There really is no
reason not to be running the latest version of BIND9.
On Jun 28, 2006, at 4:26 PM, Barry Margolin wrote:

> In article ,
> Gregory Hicks wrote:
>
>>> Subject: RE: Named errors
>>> Date: Wed, 28 Jun 2006 13:21:07 -0400
>>> From: "Jeff Lightner"
>>> To: , "Kevin Darcy"
>>> Cc:
>>>
>>> Well now it IS broke ain't it?
>>>
>>> If you tell them the most likely cause is that you were hacked
>>> that in
>>> tandem with the fact it is not working properly should get them
>>> to let
>>> you upgrade.
>>
>> Actually, I'd put it more 'diplomatically' as in:
>>
>> " The Bind that we are using is WELL past its "use-by" date. I
>> need to
>> upgrade to a much later version. although I cannot positively state
>> that our name server has been hacked, everything I have now points to
>> that.
>
> Where are you getting the idea that his log messages point to that?
> "Bad referrel" errors indicate problems on other servers, not problems
> on your own. Akamai also pulls some funny games with DNS to implement
> their global load balancing, and these often result in complaints from
> DNS servers.
>
> So if you're suggesting that Jeff lie to his bosses to get them to let
> him upgrade, at least be honest about it.
>
> --
> Barry Margolin, barmar@alum.mit.edu
> Arlington, MA
> *** PLEASE post questions in newsgroups, not directly to me ***
> *** PLEASE don't copy me on replies, I'll read them in the group ***
>
>

David Miller
Desktop Support
millerdc@fusion.gat.com