Re: can't resolve some addresses
Alex Efros <[email protected]>
| Newsgroups | gmane.network.djbdns |
|---|---|
| Organization | http://powerman.name/ |
| Message-ID | <[email protected]> |
Hi! On Sun, Apr 05, 2009 at 09:56:56PM -0400, Jeff King wrote: > You are using the qmerge patch (or you are using zinq, which > incorporates it). It would have been very useful to mention from the > outset that you are not using stock dnscache. By default, Gentoo use these patches: headtail.patch dnsroots.patch dnstracesort.patch 1.05-errno.patch CVE2009-0858_0001-check-response-domain-name-length.patch CVE2008-4392_0001-dnscache-merge-similar-outgoing-queries.patch CVE2008-4392_0002-dnscache-cache-soa-records.patch First 4 are harmless and required to compile/use djbdns on modern linux. Last 3 I've disabled and tried to resolve these hosts without them - this doesn't solved issue. Because of this I've recompiled djbdns using all these patches again to have standard (for Gentoo) package. So, yeah, I gather these logs with these patches. > That patch has issues with lame and failing servers. I posted some > followup patches recently which improve the situation. Are you using the > qmerge patch without those followup patches? If you are using zinq, > which version are you using? I've uploaded all these patches to http://powerman.name/tmp/dnscache/ I'll now disable 3 CVE* patches again and gather new logs without them. -- WBR, Alex.