Re: FC4, named & system hang

Mike McMullen wrote:

----- Original Message ----- From: "Mike McMullen" <mlm@xxxxxxxxxxxxxxxxxx>



Hi All,

I am experiencing occasional hangs on an FC4 web server that is
also a name server. After rebooting the only thing I see in the logs
are about a zillion messages from named stating "RCODE (SERVFAIL)".

Here is an example:

Jul 14 02:03:37 www named[1652]: unexpected RCODE (SERVFAIL) resolving '52.134.78.140.in-addr.arpa/PTR/IN': 140.78.2.62#53

These messages go on for about 15-18 minutes and then the system hangs.

I'm assuming it's some type of hacking attempt.

Can anyone give me some insight on what might be happening here and better
yet how to prevent it?

Thanks,

Mike

Reviewing the logs more closely I also see brute force attempts on sshd. I have a rule
set up in iptables to disable login attempts for 1 minute if there are 3 attempts a minute.

The logs show the same site being blocked and then trying again about 5 minutes later.

However, the system hang occurs about 7-8 minutes after the last ssh attempt and about
a 100-200 RCODE errors later.

Any help appreciated!

Mike


Maybe you should look into denyhosts. I believe it's in the Extras repository, and you can configure it to deny access to sshd from any IP address that repeatedly fails logins (brute force attacks). There's also a configuration option that allows you to block all internet services to that IP address.

Sorry I can't help you with why your system is hanging, but if you're not being brute force attacked, maybe your system won't hang anymore.

Hope this helps,
Justin Willmert

--
fedora-list mailing list
fedora-list@xxxxxxxxxx
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list

Relevant Pages

  • Re: FC4, named & system hang
    ... I am experiencing occasional hangs on an FC4 web server that is ... These messages go on for about 15-18 minutes and then the system hangs. ... The logs show the same site being blocked and then trying again about 5 minutes later. ...
    (Fedora)
  • Re: XP hangs at Mup.sys
    ... Yes I did google for "XP hangs at MUP.Sys" I tried ... another desktop running XP... ... Windows Desktop Experience ... The system hangs at MUP.sys regardless of which option selected... ...
    (microsoft.public.windowsxp.general)
  • 6.2-pre: g_vfs_done():ad4s1d[READ(offset=-8573723385966362624, length=16384)]error=5
    ... Then I start mc and go to dir on this hdd - system hangs with subject. ... PS Maybe ali controller doesnt support 320-gb hdd drives or near that and it ...
    (freebsd-stable)
  • Re: The update is a downgrade!
    ... IE hangs. ... Cannot navigate her hard drive from Save As in any Office product or ... during an Insert File operation in Outlook. ... System hangs ...
    (microsoft.public.windowsxp.general)
  • Internet Explorer System HAN when loading too much stuff! Help!
    ... I have been encountering random system hangs when using IE. ... preloads about 200+ referral images, ... tried this on another PC with http connection limit at 1k and it worked ...
    (microsoft.public.windowsxp.help_and_support)