변군이글루

named 계정 생성 # useradd -m -d /var/named -c "NAMED" -s /sbin/nologin -u 25 named # grep named /etc/passwd named:x:25:25:Named:/var/named:/sbin/nologin

recursive clients 개수 # rndc status | grep recursive recursive clients: 6/10000 // recursive clients 수가 200이상 증가 시, // 외부 통신이 불가능한 상황이 발생한다. # rndc recursing // 현재 외부 질의를 하고 있는 퀴리를 수집 # vi /var/named/named.recursing (recursing queries 로그 확인) ----------------------------------------------------------------- ; ; Recursing Queries ; ; client 152.149.80.2#35056: '118.220.172.71.co.kr' requesttime 124..

named.localhost ZONE 파일 $TTL 1D @ IN SOA @ rname.invalid. ( 0 ; serial 1D ; refresh 1H ; retry 1W ; expire 3H ) ; minimum NS @ A 127.0.0.1 AAAA ::1

CVE-2013-3919: A recursive resolver can be crashed by a query for a malformed zone - 원격의 사용자가 특수하게 조작된 ‘recursive query’를 할 경우 발생할 수 있는 서비스거부 취약점 A defect exists which allows an attacker to crash a BIND 9 recursive resolver with a RUNTIME_CHECK error in resolver.c CVE: CVE-2013-3919 Document Version: 1.1 Posting date: 04 Jun 2013 Program Impacted: BIND 9 Versions affected: BIND 9.6-ESV-R9, 9.8.5..

리눅스(CENTOS4) YUM URL 변경 Centos4에서 YUM 사용하기 /etc/yum.repos.d/CentOS-Base.repo [base] name=CentOS-$releasever - Base #mirrorlist=http://mirrorlist.centos.org/?release=$releasever&arch=$basearch&repo=os #baseurl=http://mirror.centos.org/centos/$releasever/os/$basearch/ baseurl=http://vault.centos.org/4.9/os/$basearch/ gpgcheck=0 #gpgkey=http://mirror.centos.org/centos/RPM-GPG-KEY-centos4 priority=1..