Package: bind9 Version: 1:9.6.ESV.R3+dfsg-0+lenny1 Severity: important
Do not shoot me. I am just the messenger and I am describing what I see. I have a lenny server running unadulterated lenny bind9 and all clients on the network are lenny (sans one macbook pro with OSX). There is no ACLs, no query controls, nothing (private network behind a firewall). The only non-standard option is using a forwarder across a VPN to a machine under my control (to avoid providers doing silly stuff with DNS). The moment a client which has been freshly upgraded from lenny to squeeze (an old PPC TiBook G4) comes up bind starts denying queries to everyone. Feb 10 16:11:51 eden named[3210]: client 192.168.8.6#35237: query (cache) '0.debian.pool.ntp.org/A/IN' denied >From there queries are denied until a reboot hits it on the head or the >sysadmin is lucky to be on the console and already logged in. Bind becomes unkillable unless with a -9 and a newly started bind instance does not behave correctly either. Any ideas how to debug this one? -- System Information: Debian Release: 5.0.7 APT prefers stable APT policy: (500, 'stable') Architecture: i386 (i686) Kernel: Linux 2.6.26-2-686 (SMP w/1 CPU core) Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/bash Versions of packages bind9 depends on: ii adduser 3.110 add and remove users and groups ii bind9utils 1:9.6.ESV.R3+dfsg-0+lenny1 Utilities for BIND ii debconf [debc 1.5.24 Debian configuration management sy ii libbind9-50 1:9.6.ESV.R3+dfsg-0+lenny1 BIND9 Shared Library used by BIND ii libc6 2.7-18lenny6 GNU C Library: Shared libraries ii libcap2 2.11-2 support for getting/setting POSIX. ii libdb4.6 4.6.21-11 Berkeley v4.6 Database Libraries [ ii libdns58 1:9.6.ESV.R3+dfsg-0+lenny1 DNS Shared Library used by BIND ii libisc50 1:9.6.ESV.R3+dfsg-0+lenny1 ISC Shared Library used by BIND ii libisccc50 1:9.6.ESV.R3+dfsg-0+lenny1 Command Channel Library used by BI ii libisccfg50 1:9.6.ESV.R3+dfsg-0+lenny1 Config File Handling Library used ii libkrb53 1.6.dfsg.4~beta1-5lenny6 MIT Kerberos runtime libraries ii libldap-2.4-2 2.4.11-1+lenny2 OpenLDAP libraries ii liblwres50 1:9.6.ESV.R3+dfsg-0+lenny1 Lightweight Resolver Library used ii libssl0.9.8 0.9.8g-15+lenny9 SSL shared libraries ii libxml2 2.6.32.dfsg-5+lenny2 GNOME XML library ii lsb-base 3.2-20 Linux Standard Base 3.2 init scrip ii net-tools 1.60-22 The NET-3 networking toolkit ii netbase 4.34 Basic TCP/IP networking system bind9 recommends no packages. Versions of packages bind9 suggests: ii bind9-doc 1:9.6.ESV.R3+dfsg-0+lenny1 Documentation for BIND ii dnsutils 1:9.6.ESV.R3+dfsg-0+lenny1 Clients provided with BIND pn resolvconf <none> (no description available) pn ufw <none> (no description available) -- debconf-show failed -- To UNSUBSCRIBE, email to [email protected] with a subject of "unsubscribe". Trouble? Contact [email protected]
