On Tue, 29 Jul 2008 13:21:15 -0700, Steve Lancaster
wrote:

>Well... while it's
>
><http://www.zdnet.com.au/news/securit...blunder/0,1300
>61744,339290928,00.htm>
>
>certainly "another view" on the same facts.. I find it a particularly
>distasteful one...
>
Steve:

I agree with you and others here, ISC has done a great job in short
time.

As one whose "other job" is as a flight RN on a helicopter (medical
transport) lets put it this way....no one is dying cause your name
servers are crashing...in this area you get one chance to fix a
problem and if you guess wrong or hesitate too long someone may truly
suffer due to is.....name server crashing is not that area for sure.

I think everyone needs to take a nice deep breath, relax, ISC will
come up with a fix soon, and for now if its crashing look into
something like maybe psmon to keep an eye on it and kick it back in
(at least in the *nix) world.

Now if someone can tell me how to do the same restart in Windoze I'd
be much appreciative, (Not my strong suit and I've got one box here
with 9.5.p1 on it that dies at random.

George
--
===[George R. Kasica]=== +1 262 677 0766
President +1 206 374 6482 FAX
Netwrx Consulting Inc. Jackson, WI USA
http://www.netwrx1.com
georgek@netwrx1.com
ICQ #12862186

I am not saying burn ISC at the stake by any stretch of the imagination, but
I think your comment about people not dying if a nameserver is down is a
little understating things. Perhaps in your DNS environment servers
crashing and being unable to resolve is not a big deal, but I bet a lot of
the folks here who run DNS for large organizations would beg to differ.
--
-Ben Croswell

On Thu, Jul 31, 2008 at 7:08 AM, George R. Kasica wrote:

> On Tue, 29 Jul 2008 13:21:15 -0700, Steve Lancaster
> wrote:
>
> >Well... while it's
> >
> ><
> http://www.zdnet.com.au/news/securit...blunder/0,1300
> >61744,339290928,00.htm>
> >
> >certainly "another view" on the same facts.. I find it a particularly
> >distasteful one...
> >
> Steve:
>
> I agree with you and others here, ISC has done a great job in short
> time.
>
> As one whose "other job" is as a flight RN on a helicopter (medical
> transport) lets put it this way....no one is dying cause your name
> servers are crashing...in this area you get one chance to fix a
> problem and if you guess wrong or hesitate too long someone may truly
> suffer due to is.....name server crashing is not that area for sure.
>
> I think everyone needs to take a nice deep breath, relax, ISC will
> come up with a fix soon, and for now if its crashing look into
> something like maybe psmon to keep an eye on it and kick it back in
> (at least in the *nix) world.
>
> Now if someone can tell me how to do the same restart in Windoze I'd
> be much appreciative, (Not my strong suit and I've got one box here
> with 9.5.p1 on it that dies at random.
>
> George
> --
> ===[George R. Kasica]=== +1 262 677 0766
> President +1 206 374 6482 FAX
> Netwrx Consulting Inc. Jackson, WI USA
> http://www.netwrx1.com
> georgek@netwrx1.com
> ICQ #12862186
>
>

Ben Croswell wrote:
> I am not saying burn ISC at the stake by any stretch of the imagination, but
> I think your comment about people not dying if a nameserver is down is a
> little understating things. Perhaps in your DNS environment servers
> crashing and being unable to resolve is not a big deal, but I bet a lot of
> the folks here who run DNS for large organizations would beg to differ.
I think that DNS redundancy is something that people might have put on
the back burner in the past.

Perhaps this exercise, along with bringing up some issues with staying
current will also get people to reconsider how important DNS is and how
they should re-structure their network to provide redundancy.

Perhaps.

AlanC

Thankfully I work for a company that understands how important DNS is.
However, the buzz has been "upgrade everything immediately because the
Internet is going to stop working". If you upgrade everything to -P1 you
have the potential for all of your redundancy to be crashing as well.
--
-Ben Croswell

On Thu, Jul 31, 2008 at 3:18 PM, Alan Clegg wrote:

> Ben Croswell wrote:
> > I am not saying burn ISC at the stake by any stretch of the imagination,
> but
> > I think your comment about people not dying if a nameserver is down is a
> > little understating things. Perhaps in your DNS environment servers
> > crashing and being unable to resolve is not a big deal, but I bet a lot
> of
> > the folks here who run DNS for large organizations would beg to differ.
> I think that DNS redundancy is something that people might have put on
> the back burner in the past.
>
> Perhaps this exercise, along with bringing up some issues with staying
> current will also get people to reconsider how important DNS is and how
> they should re-structure their network to provide redundancy.
>
> Perhaps.
>
> AlanC
>
>
>
>

I could imagine a few places where DNS is part of life support; I
believe that would be a bad design but it could be so a few places.

Ben Croswell wrote:
> I am not saying burn ISC at the stake by any stretch of the imagination, but
> I think your comment about people not dying if a nameserver is down is a
> little understating things. Perhaps in your DNS environment servers
> crashing and being unable to resolve is not a big deal, but I bet a lot of
> the folks here who run DNS for large organizations would beg to differ.
>

--
Best regards

Sten Carlsen

No improvements come from shouting:

"MALE BOVINE MANURE!!!"

George R. Kasica wrote:
> On Tue, 29 Jul 2008 13:21:15 -0700, Steve Lancaster
> wrote:
>
>> Well... while it's
>>
>> <http://www.zdnet.com.au/news/securit...blunder/0,1300
>> 61744,339290928,00.htm>
>>
>> certainly "another view" on the same facts.. I find it a particularly
>> distasteful one...
>>
> Steve:
>
> I agree with you and others here, ISC has done a great job in short
> time.
>
> As one whose "other job" is as a flight RN on a helicopter (medical
> transport) lets put it this way....no one is dying cause your name
> servers are crashing...in this area you get one chance to fix a
> problem and if you guess wrong or hesitate too long someone may truly
> suffer due to is.....name server crashing is not that area for sure.
>
> I think everyone needs to take a nice deep breath, relax, ISC will
> come up with a fix soon, and for now if its crashing look into
> something like maybe psmon to keep an eye on it and kick it back in
> (at least in the *nix) world.
>
> Now if someone can tell me how to do the same restart in Windoze I'd
> be much appreciative, (Not my strong suit and I've got one box here
> with 9.5.p1 on it that dies at random.
>

Just go into the Services Computer Management, select ISC BIND and go
into properties. Select the Recovery Tab and set the action you want the
service to take when it dies.

Danny
> George