Página 1 de 1

Micro Cortes en la red, Ataque DNS-REBINDING? [LOG]

MensagemEnviado: Ter Ago 02, 2016 5:45 pm
por silverte
Buenas, amigo espero puedan ayudarme, tengo actualmente un servidor BrazilFW 3.0.260 y estoy teniendo algunos cortes en mi red que duran aproximadamente unos minutos, 3 o 2 cuando máximo, cuando puedo acceder al webadmin y revisar el log de aplicaciones, noto lo siguiente:

Código: Selecionar todos
Aug  2 15:53:50 brazilfw daemon.warn named[6382]: checkhints: h.root-servers.net/A (198.97.190.53) missing from hints
Aug  2 15:53:50 brazilfw daemon.warn named[6382]: checkhints: h.root-servers.net/A (128.63.2.53) extra record in hints
Aug  2 15:53:50 brazilfw daemon.warn named[6382]: checkhints: h.root-servers.net/AAAA (2001:500:1::53) missing from hints
Aug  2 15:53:50 brazilfw daemon.warn named[6382]: checkhints: h.root-servers.net/AAAA (2001:500:1::803f:235) extra record in hints
Aug  2 15:54:10 brazilfw daemon.warn named[6382]: checkhints: h.root-servers.net/A (198.97.190.53) missing from hints
Aug  2 15:54:10 brazilfw daemon.warn named[6382]: checkhints: h.root-servers.net/A (128.63.2.53) extra record in hints
Aug  2 15:54:10 brazilfw daemon.warn named[6382]: checkhints: h.root-servers.net/AAAA (2001:500:1::53) missing from hints
Aug  2 15:54:10 brazilfw daemon.warn named[6382]: checkhints: h.root-servers.net/AAAA (2001:500:1::803f:235) extra record in hints
Aug  2 15:55:41 brazilfw daemon.warn named[6382]: checkhints: h.root-servers.net/A (198.97.190.53) missing from hints
Aug  2 15:55:41 brazilfw daemon.warn named[6382]: checkhints: h.root-servers.net/A (128.63.2.53) extra record in hints
Aug  2 15:55:41 brazilfw daemon.warn named[6382]: checkhints: h.root-servers.net/AAAA (2001:500:1::53) missing from hints
Aug  2 15:55:41 brazilfw daemon.warn named[6382]: checkhints: h.root-servers.net/AAAA (2001:500:1::803f:235) extra record


Sera esto un ataque DNS-Rebinding?, o algún tipo de ataque a mi red?, que creen que pueda estar sucediendo?.
Agradezco su pronta ayuda gracias :o! :?:

Re: Micro Cortes en la red, Ataque DNS-REBINDING? [LOG]

MensagemEnviado: Sáb Ago 06, 2016 10:11 am
por coralero
tengo el mismo problema ...

Re: Micro Cortes en la red, Ataque DNS-REBINDING? [LOG]

MensagemEnviado: Ter Ago 09, 2016 3:34 am
por silverte
coralero escreveu:tengo el mismo problema ...

De casualidad te has fijado si tienes errores en el disco?, algún sector dañado?, creo que puede ser este el problema.

Re: Micro Cortes en la red, Ataque DNS-REBINDING? [LOG]

MensagemEnviado: Qua Ago 10, 2016 11:42 am
por amores123
Código: Selecionar todos
Aug 10 08:41:13 pc daemon.warn named[5069]: checkhints: h.root-servers.net/AAAA (2001:500:1::53) missing from hints
Aug 10 08:41:13 pc daemon.warn named[5069]: checkhints: h.root-servers.net/AAAA (2001:500:1::803f:235) extra record in hints
Aug 10 08:41:17 pc daemon.warn named[5069]: checkhints: h.root-servers.net/A (198.97.190.53) missing from hints
Aug 10 08:41:17 pc daemon.warn named[5069]: checkhints: h.root-servers.net/A (128.63.2.53) extra record in hints
Aug 10 08:41:17 pc daemon.warn named[5069]: checkhints: h.root-servers.net/AAAA (2001:500:1::53) missing from hints
Aug 10 08:41:17 pc daemon.warn named[5069]: checkhints: h.root-servers.net/AAAA (2001:500:1::803f:235) extra record in hints
Aug 10 08:41:18 pc daemon.warn named[5069]: checkhints: h.root-servers.net/A (198.97.190.53) missing from hints
Aug 10 08:41:18 pc daemon.warn named[5069]: checkhints: h.root-servers.net/A (128.63.2.53) extra record in hints
Aug 10 08:41:18 pc daemon.warn named[5069]: checkhints: h.root-servers.net/AAAA (2001:500:1::53) missing from hints
Aug 10 08:41:18 pc daemon.warn named[5069]: checkhints: h.root-servers.net/AAAA (2001:500:1::803f:235) extra record in hints
Aug 10 08:41:31 pc daemon.warn named[5069]: checkhints: h.root-servers.net/A (198.97.190.53) missing from hints
Aug 10 08:41:31 pc daemon.warn named[5069]: checkhints: h.root-servers.net/A (128.63.2.53) extra record in hints
Aug 10 08:41:31 pc daemon.warn named[5069]: checkhints: h.root-servers.net/AAAA (2001:500:1::53) missing from hints
Aug 10 08:41:31 pc daemon.warn named[5069]: checkhints: h.root-servers.net/AAAA (2001:500:1::803f:235) extra record in hints
Aug 10 08:41:36 pc daemon.warn named[5069]: checkhints: h.root-servers.net/A (198.97.190.53) missing from hints
Aug 10 08:41:36 pc daemon.warn named[5069]: checkhints: h.root-servers.net/A (128.63.2.53) extra record in hints
Aug 10 08:41:36 pc daemon.warn named[5069]: checkhints: h.root-servers.net/AAAA (2001:500:1::53) missing from hints
Aug 10 08:41:36 pc daemon.warn named[5069]: checkhints: h.root-servers.net/AAAA (2001:500:1::803f:235) extra record in hints
Aug 10 08:44:02 pc daemon.warn named[5069]: checkhints: h.root-servers.net/A (198.97.190.53) missing from hints
Aug 10 08:44:02 pc daemon.warn named[5069]: checkhints: h.root-servers.net/A (128.63.2.53) extra record in hints
Aug 10 08:44:02 pc daemon.warn named[5069]: checkhints: h.root-servers.net/AAAA (2001:500:1::53) missing from hints
Aug 10 08:44:02 pc daemon.warn named[5069]: checkhints: h.root-servers.net/AAAA (2001:500:1::803f:235) extra record in hints
Aug 10 08:45:22 pc daemon.warn named[5069]: checkhints: h.root-servers.net/A (198.97.190.53) missing from hints
Aug 10 08:45:22 pc daemon.warn named[5069]: checkhints: h.root-servers.net/A (128.63.2.53) extra record in hints
Aug 10 08:45:22 pc daemon.warn named[5069]: checkhints: h.root-servers.net/AAAA (2001:500:1::53) missing from hints
Aug 10 08:45:22 pc daemon.warn named[5069]: checkhints: h.root-servers.net/AAAA (2001:500:1::803f:235) extra record in hints
Aug 10 08:46:23 pc daemon.warn named[5069]: checkhints: h.root-servers.net/A (198.97.190.53) missing from hints
Aug 10 08:46:23 pc daemon.warn named[5069]: checkhints: h.root-servers.net/A (128.63.2.53) extra record in hints
Aug 10 08:46:23 pc daemon.warn named[5069]: checkhints: h.root-servers.net/AAAA (2001:500:1::53) missing from hints
Aug 10 08:46:23 pc daemon.warn named[5069]: checkhints: h.root-servers.net/AAAA (2001:500:1::803f:235) extra record in hints
Aug 10 08:51:18 pc daemon.warn named[5069]: checkhints: h.root-servers.net/A (198.97.190.53) missing from hints
Aug 10 08:51:18 pc daemon.warn named[5069]: checkhints: h.root-servers.net/A (128.63.2.53) extra record in hints
Aug 10 08:51:18 pc daemon.warn named[5069]: checkhints: h.root-servers.net/AAAA (2001:500:1::53) missing from hints
Aug 10 08:51:18 pc daemon.warn named[5069]: checkhints: h.root-servers.net/AAAA (2001:500:1::803f:235) extra record in hints
Aug 10 08:52:19 pc daemon.warn named[5069]: checkhints: h.root-servers.net/A (198.97.190.53) missing from hints
Aug 10 08:52:19 pc daemon.warn named[5069]: checkhints: h.root-servers.net/A (128.63.2.53) extra record in hints
Aug 10 08:52:19 pc daemon.warn named[5069]: checkhints: h.root-servers.net/AAAA (2001:500:1::53) missing from hints
Aug 10 08:52:19 pc daemon.warn named[5069]: checkhints: h.root-servers.net/AAAA (2001:500:1::803f:235) extra record in hints
Aug 10 08:53:55 pc daemon.warn named[5069]: checkhints: h.root-servers.net/A (198.97.190.53) missing from hints
Aug 10 08:53:55 pc daemon.warn named[5069]: checkhints: h.root-servers.net/A (128.63.2.53) extra record in hints
Aug 10 08:53:55 pc daemon.warn named[5069]: checkhints: h.root-servers.net/AAAA (2001:500:1::53) missing from hints
Aug 10 08:53:55 pc daemon.warn named[5069]: checkhints: h.root-servers.net/AAAA (2001:500:1::803f:235) extra record in hints
Aug 10 08:56:25 pc daemon.warn named[5069]: checkhints: h.root-servers.net/A (198.97.190.53) missing from hints
Aug 10 08:56:25 pc daemon.warn named[5069]: checkhints: h.root-servers.net/A (128.63.2.53) extra record in hints
Aug 10 08:56:25 pc daemon.warn named[5069]: checkhints: h.root-servers.net/AAAA (2001:500:1::53) missing from hints
Aug 10 08:56:25 pc daemon.warn named[5069]: checkhints: h.root-servers.net/AAAA (2001:500:1::803f:235) extra record in hints
Aug 10 08:57:24 pc daemon.warn named[5069]: checkhints: h.root-servers.net/A (198.97.190.53) missing from hints
Aug 10 08:57:24 pc daemon.warn named[5069]: checkhints: h.root-servers.net/A (128.63.2.53) extra record in hints
Aug 10 08:57:24 pc daemon.warn named[5069]: checkhints: h.root-servers.net/AAAA (2001:500:1::53) missing from hints
Aug 10 08:57:24 pc daemon.warn named[5069]: checkhints: h.root-servers.net/AAAA (2001:500:1::803f:235) extra record in hints
Aug 10 08:59:36 pc daemon.warn named[5069]: checkhints: h.root-servers.net/A (198.97.190.53) missing from hints
Aug 10 08:59:36 pc daemon.warn named[5069]: checkhints: h.root-servers.net/A (128.63.2.53) extra record in hints
Aug 10 08:59:36 pc daemon.warn named[5069]: checkhints: h.root-servers.net/AAAA (2001:500:1::53) missing from hints
Aug 10 08:59:36 pc daemon.warn named[5069]: checkhints: h.root-servers.net/AAAA (2001:500:1::803f:235) extra record in hints
Aug 10 08:59:52 pc daemon.warn named[5069]: checkhints: h.root-servers.net/A (198.97.190.53) missing from hints
Aug 10 08:59:52 pc daemon.warn named[5069]: checkhints: h.root-servers.net/A (128.63.2.53) extra record in hints
Aug 10 08:59:52 pc daemon.warn named[5069]: checkhints: h.root-servers.net/AAAA (2001:500:1::53) missing from hints
Aug 10 08:59:52 pc daemon.warn named[5069]: checkhints: h.root-servers.net/AAAA (2001:500:1::803f:235) extra record in hints
Aug 10 09:01:39 pc daemon.warn named[5069]: checkhints: h.root-servers.net/A (198.97.190.53) missing from hints
Aug 10 09:01:39 pc daemon.warn named[5069]: checkhints: h.root-servers.net/A (128.63.2.53) extra record in hints
Aug 10 09:01:39 pc daemon.warn named[5069]: checkhints: h.root-servers.net/AAAA (2001:500:1::53) missing from hints
Aug 10 09:01:39 pc daemon.warn named[5069]: checkhints: h.root-servers.net/AAAA (2001:500:1::803f:235) extra record in hints

Re: Micro Cortes en la red, Ataque DNS-REBINDING? [LOG]

MensagemEnviado: Sáb Set 03, 2016 10:33 pm
por audonei
estou com o mesmo problema alguem tem a solução?
edit: dns local desatualizado^^ use o dns do google e acaba se os problemas.

Re: Micro Cortes en la red, Ataque DNS-REBINDING? [LOG]

MensagemEnviado: Seg Set 05, 2016 9:47 am
por BlackByte
Hola que tal
el problema parece venir por un cambio en el server dns root H
https://www.isc.org/blogs/h-root-will-change-its-addresses-on-1-december-2015-what-does-this-mean-for-you/
Saludos :o!

Re: Micro Cortes en la red, Ataque DNS-REBINDING? [LOG]

MensagemEnviado: Qua Set 21, 2016 5:11 pm
por audonei
atualizei o bfw e o problema persiste! alguem tem uma solução:?

Re: Micro Cortes en la red, Ataque DNS-REBINDING? [LOG]

MensagemEnviado: Qua Set 21, 2016 8:07 pm
por reginaldo
Boa Noite!

Este assunto foi relatado no Bug Tracker do BFW?

Acho que não, pois o Woshman teria "acertado" na realese 3.0.262.