RE: [cobalt-users] RAQ3 DNS Problem

["Dave" <daver1@xxxxxxxxxxxxxxx>]

-----Original Message-----

I have a RAQ3 only used as a primary DNS server.

Two days ago active monitor reported that the DNS service was not
responding.

The only suggestion from the Cobalt KB was that the RAQ could not resolve
its own name, and that a valid upstream DNS server should be entered in the
network settings.  Of course the setting is valid, and a couple of other DNS
servers have been tried, all with no effect.

Another symptom is that I can not estalish a TELNET session with the box.
Web is OK, FTP is OK, Mail is OK.

Any ideas out there...?

Thanks in advance,
James Thomas

-------------reply-----------------
What you are describing is symptomatic of the hacker attack we had on our
system. I am not sure of the resolution, as our lease provider fixed it for
us. I know that the hacker exploited the bind issue to gain access. We have
also had to remove and replace about 1/3 of all user accounts. They would
show up in the GUI - but were not recognized anywhere else. It is not clear
whether the hacker is to blame for this issue or cobalt's security and OS
updates. It took the techs about an hour to fix the DNS problems.

----------------------------------------------------------------------------
-----
Cheers, Dave Reid (Night Rider)
Engaging in a battle of wits should only be attempted when sufficiently
armed
----------------------------------------------------------------------------
-----