Re: [gentoo-user] DNS poisoning fix

2008-07-11 Thread Dave Oxley
I restarted bind (had to do a killall) and I had updated tools and it still didn't work. It was my IP address that showed up on the site. But today it started working and now says I'm safe although I hadn't changed anything since. Don't know what the answer was but at least it's ok now. Cheers

Re: [gentoo-user] DNS poisoning fix

2008-07-10 Thread Alan McKinnon
On Thursday 10 July 2008, Josh Cepek wrote: > Be sure you restart the BIND server after updating too, otherwise it > will happily continue to use the old version.  "/etc/init.d/named > restart" should do it. make that: killall named ; /etc/init.d/named start named is notorious for not restartin

Re: [gentoo-user] DNS poisoning fix

2008-07-10 Thread Josh Cepek
Dave Oxley wrote: I've installed 9.4.2-P1 but http://www.doxpara.com/ says I'm still vulnerable. What more do I need to do? Cheers, Dave. Mick wrote: Hi All, Have you seen this? http://uk.news.yahoo.com/afp/20080709/ttc-us-it-internet-software-crime-e0bba4a.html and this? http://www.do

Re: [gentoo-user] DNS poisoning fix

2008-07-10 Thread Volker Armin Hemmann
On Donnerstag, 10. Juli 2008, Dave Oxley wrote: > I've installed 9.4.2-P1 but http://www.doxpara.com/ says I'm still > vulnerable. What more do I need to do? you need to install the updated tools to. Client and server side have to be fixed. Also the DNS your DNS is using has to be fixed. And fina

Re: [gentoo-user] DNS poisoning fix

2008-07-10 Thread Dirk Uys
On Thu, Jul 10, 2008 at 3:35 PM, Dave Oxley <[EMAIL PROTECTED]> wrote: > I've installed 9.4.2-P1 but http://www.doxpara.com/ says I'm still > vulnerable. What more do I need to do? > > Cheers, > Dave. > > Mick wrote: >> >> Hi All, >> >> Have you seen this? >> >> >> http://uk.news.yahoo.com/afp/2008

Re: [gentoo-user] DNS poisoning fix

2008-07-10 Thread Dave Oxley
I've installed 9.4.2-P1 but http://www.doxpara.com/ says I'm still vulnerable. What more do I need to do? Cheers, Dave. Mick wrote: Hi All, Have you seen this? http://uk.news.yahoo.com/afp/20080709/ttc-us-it-internet-software-crime-e0bba4a.html and this? http://www.doxpara.com/ Is it mere

RE: [gentoo-user] DNS poisoning fix

2008-07-10 Thread Adam Carter
> So AFAICT it was fixed in stable/x86 around 11 months ago. Ignore my earlier idoicy - from ISC's site; "YOU ARE ADVISED TO INSTALL EITHER THE PATCHES (9.5.0-P1, 9.4.2-P1, 9.3.5-P1) OR THE NEW BETA RELEASES (9.5.1b1, 9.4.3b2) IMMEDIATELY. The patches will have a noticeable impact on the perfo

RE: [gentoo-user] DNS poisoning fix

2008-07-10 Thread Adam Carter
> Is it merely a matter of using the right version of bind (for > those who run a > bind daemon locally), or does it go further than that? "This issue is addressed in ISC BIND 9.2.8-P1, BIND 9.3.4-P1, BIND 9.4.1-P1 or BIND 9.5.0a6" rix adam # emerge -pv bind These are the packages that would be

Re: [gentoo-user] DNS poisoning fix

2008-07-09 Thread Alan McKinnon
On Wednesday 09 July 2008, Mick wrote: > Is it merely a matter of using the right version of bind (for those > who run a bind daemon locally), or does it go further than that? I have no idea how far it goes. What I can tell you is that today I updated 3 name servers, a colleague did the other thr

Re: [gentoo-user] DNS poisoning fix

2008-07-09 Thread Daniel Pielmeier
Mick schrieb: Hi All, Have you seen this? http://uk.news.yahoo.com/afp/20080709/ttc-us-it-internet-software-crime-e0bba4a.html and this? http://www.doxpara.com/ Is it merely a matter of using the right version of bind (for those who run a bind daemon locally), or does it go further than tha