ftp://ftp.sendmail.org/pub/sendmail/ から抜粋。 8.10.2 Detect and avoid a serious Linux capabilities security bug. 8.10.1 Bug fix release: avoids dangerous AIX 4.X linker behavior 8.9.3 header denial of service fixed. 8.9.2 accept() denial of service attack on Linux systems fixed.
http://www.gentoo.org/ ・ D.J. Bernstein's supervise used for Internet services by default -- to ensure availability (ssh, samba, xinetd, dcron, dnscache, and more being added all the time)
#dnscache-conf dnscache dnslog /etc/dnscachex 192.168.0.*** #ln -s /etc/dnscachex /service #touch /etc/dnscachex/root/ip/192.168.0 で、他hostの/etc/resolv.confを192.168.0.*** に設定し、nslookupしても Can't find server name for address 192.168.0.***:No response from server Default servers are not available になってしまいます。
失礼しました。 make した時のエラーメッセージは下記のとおりです。 --------------------------------------------------------------------- ./compile tai64nlocal.c tai64nlocal.c: In function `main': tai64nlocal.c:54: warning:assignment makes pointer from integer without a cast tai64nlocal.c:55: dereferencing pointer to incomplete type tai64nlocal.c:56: dereferencing pointer to incomplete type tai64nlocal.c:57: dereferencing pointer to incomplete type tai64nlocal.c:58: dereferencing pointer to incomplete type tai64nlocal.c:59: dereferencing pointer to incomplete type tai64nlocal.c:60: dereferencing pointer to incomplete type make: *** [tai64nlocal.o] エラー 1 --------------------------------------------------------------------
From djb-qmail-return-3264-j=xxxx@koobera.math.uic.edu Wed Jun 11 22:12:04 1997 Delivered-To: xxx@xxx Mailing-List: contact djb-qmail-help@koobera.math.uic.edu; run by ezmlm Delivered-To: mailing list djb-qmail@koobera.math.uic.edu Delivered-To: djb-qmail@koobera.math.uic.edu Message-Id: <199706112211.RAA11254@spike.porcupine.org> Subject: qmail-dos-2.c, another denial of service attack To: djb-qmail@koobera.math.uic.edu Date: Wed, 11 Jun 1997 18:11:41 -0400 (EDT) From: wietse@wzv.win.tue.nl (Wietse Venema) Organization: Wietse Venema on sabattical leave, 14 Nosband Avenue 4J, White Plains, NY 10605, USA X-Phone: +1 914 948 7129 X-Time-Zone: USA EST, 6 hours behind central European time X-Mailer: ELM [version 2.4ME+ PL15 (25)] MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit
Problem: denial of service problem in qmail-smtpd. By sending an unlimited number of recipient addresses, a malicious SMTP client can run the qmail host out of memory, rendering the system unusable.
Fix: impose some configurable upper bound on the number of RCPT commands per message.
Attached is a little program that illustrates the problem.
% cat ~/service/.svscan/run #!/bin/sh # normal user has his own svscan exec 2>&1 exec env - \ PATH=/command:/bin:/sbin:/usr/bin:/usr/local/bin:$HOME/bin \ /command/svscan $HOME/service > $HOME/service/.svscan/log
% cat /service/wdm/run #!/bin/sh exec 2>&1 # uncomment below if you use font server # /command/svc -u /service/xfs # sleep 3 exec /usr/X11R6/bin/wdm -nodaemon
| Subject: MS DNS servers hacked? | Date: Mon, 14 Jan 2002 12:29:13 -0600 | From: Tim Rushing <dshield@threenorth.com> | To: intrusions@incidents.org | Message-Id: <5.0.2.1.2.20020114122616.02f14090@pop3.jorsm.com> | X-Mailer: QUALCOMM Windows Eudora Version 5.0.2 | X-Sender: dshield@mail.threenorth.com | | I just saw that part 2 of Laurie Zirkle's Jan 11 posts seemed to show port | 53 hack attempts from dcwu3dns1.windowsupdate.com (207.68.131.17). | | The Register had a story today about problems with the windows update site | since late last week. (http://www.theregister.co.uk/content/4/23666.html) | and I just had a "CNAME lookup failed temporarily. (#4.4.3)" from a mailing | list I run going to a USER@hotmail.com account. | | Anyone know anything else? | | ---Tim Rushing
seek_set.c: In function `seek_set': seek_set.c:7: warning: implicit declaration of function `lseek' chkshsgr.c: In function `main': chkshsgr.c:8: warning: implicit declaration of function `getgroups' chkshsgr.c:8: warning: implicit declaration of function `setgroups' prot.c: In function `prot_gid': prot.c:11: warning: implicit declaration of function `setgroups' prot.c:13: warning: implicit declaration of function `setgid' prot.c: In function `prot_uid': prot.c:18: warning: implicit declaration of function `setuid' utime.c: In function `main': utime.c:22: warning: implicit declaration of function `utime' hier.c: In function `hier': hier.c:5: warning: implicit declaration of function `c' hier.c:7: warning: implicit declaration of function `h' hier.c:8: warning: implicit declaration of function `d'
試しに # make setup check してみましたが。特にエラーは表示されませんでした。 しかし /usr/local/djbdns は作られていません。
>>793 # echo dnscache is not running on your machine. # { echo '/envdir/s/sh/\/bin\/&/'; echo wq; } | ex /var/dns/dnscache/run # svc -u /var/dns/dnscache $ sleep 5; ps U dnscache