RE: Bind-9.6 and Heavy Cpu Load

2009-09-27 Thread Jeff Lightner
If this was an existing installation and the CPU load suddenly increased you might want to check where the queries are coming from. Not so long ago I found what appeared to be a brute force attack on DNS server by sending the same queries over and over from the same range of IPs in Romania.

Re: *.dlv.isc.org DS: must be secure warnings [was: Re: 9.6.1-P1 log message]

2009-09-27 Thread Mark Andrews
In message prayer.1.3.2.0909262248400.24...@hermes-1.csi.cam.ac.uk, Chris Tho mpson writes: Back in August there was some a thread on bind-users about messages of the shape validating @[hex]: [name].dlv.isc.org DS: must be secure failure (these are category dnssec severity warning) and