Micro Cortes en la red, Ataque DNS-REBINDING? [LOG]

Foro en español para discutir sobre cuestiones generales de BrazilFW 3.x.

Micro Cortes en la red, Ataque DNS-REBINDING? [LOG]

Mensagempor silverte » Ter Ago 02, 2016 5:45 pm

Buenas, amigo espero puedan ayudarme, tengo actualmente un servidor BrazilFW 3.0.260 y estoy teniendo algunos cortes en mi red que duran aproximadamente unos minutos, 3 o 2 cuando máximo, cuando puedo acceder al webadmin y revisar el log de aplicaciones, noto lo siguiente:

Código: Selecionar todos
Aug  2 15:53:50 brazilfw daemon.warn named[6382]: checkhints: h.root-servers.net/A (198.97.190.53) missing from hints
Aug  2 15:53:50 brazilfw daemon.warn named[6382]: checkhints: h.root-servers.net/A (128.63.2.53) extra record in hints
Aug  2 15:53:50 brazilfw daemon.warn named[6382]: checkhints: h.root-servers.net/AAAA (2001:500:1::53) missing from hints
Aug  2 15:53:50 brazilfw daemon.warn named[6382]: checkhints: h.root-servers.net/AAAA (2001:500:1::803f:235) extra record in hints
Aug  2 15:54:10 brazilfw daemon.warn named[6382]: checkhints: h.root-servers.net/A (198.97.190.53) missing from hints
Aug  2 15:54:10 brazilfw daemon.warn named[6382]: checkhints: h.root-servers.net/A (128.63.2.53) extra record in hints
Aug  2 15:54:10 brazilfw daemon.warn named[6382]: checkhints: h.root-servers.net/AAAA (2001:500:1::53) missing from hints
Aug  2 15:54:10 brazilfw daemon.warn named[6382]: checkhints: h.root-servers.net/AAAA (2001:500:1::803f:235) extra record in hints
Aug  2 15:55:41 brazilfw daemon.warn named[6382]: checkhints: h.root-servers.net/A (198.97.190.53) missing from hints
Aug  2 15:55:41 brazilfw daemon.warn named[6382]: checkhints: h.root-servers.net/A (128.63.2.53) extra record in hints
Aug  2 15:55:41 brazilfw daemon.warn named[6382]: checkhints: h.root-servers.net/AAAA (2001:500:1::53) missing from hints
Aug  2 15:55:41 brazilfw daemon.warn named[6382]: checkhints: h.root-servers.net/AAAA (2001:500:1::803f:235) extra record


Sera esto un ataque DNS-Rebinding?, o algún tipo de ataque a mi red?, que creen que pueda estar sucediendo?.
Agradezco su pronta ayuda gracias :o! :?:
Avatar do usuário
silverte
BFW Participative
 
Mensagens: 171
Registrado em: Sáb Jan 09, 2010 3:52 pm
Localização: Puerto Ordaz, Venezuela
BrazilFW Box:

Re: Micro Cortes en la red, Ataque DNS-REBINDING? [LOG]

Mensagempor coralero » Sáb Ago 06, 2016 10:11 am

tengo el mismo problema ...
Avatar do usuário
coralero
BFW Novice
BFW 3.x Update
 
Mensagens: 87
Registrado em: Qui Out 20, 2005 8:04 am
BrazilFW Box: Maquina Física
AMD Phenom Q4 8GbRam HD 1Tb.
BFW 3,0262 64Bits
Squid 3.4.14 e HaarpCache 20b

Re: Micro Cortes en la red, Ataque DNS-REBINDING? [LOG]

Mensagempor silverte » Ter Ago 09, 2016 3:34 am

coralero escreveu:tengo el mismo problema ...

De casualidad te has fijado si tienes errores en el disco?, algún sector dañado?, creo que puede ser este el problema.
Avatar do usuário
silverte
BFW Participative
 
Mensagens: 171
Registrado em: Sáb Jan 09, 2010 3:52 pm
Localização: Puerto Ordaz, Venezuela
BrazilFW Box:

Re: Micro Cortes en la red, Ataque DNS-REBINDING? [LOG]

Mensagempor amores123 » Qua Ago 10, 2016 11:42 am

Código: Selecionar todos
Aug 10 08:41:13 pc daemon.warn named[5069]: checkhints: h.root-servers.net/AAAA (2001:500:1::53) missing from hints
Aug 10 08:41:13 pc daemon.warn named[5069]: checkhints: h.root-servers.net/AAAA (2001:500:1::803f:235) extra record in hints
Aug 10 08:41:17 pc daemon.warn named[5069]: checkhints: h.root-servers.net/A (198.97.190.53) missing from hints
Aug 10 08:41:17 pc daemon.warn named[5069]: checkhints: h.root-servers.net/A (128.63.2.53) extra record in hints
Aug 10 08:41:17 pc daemon.warn named[5069]: checkhints: h.root-servers.net/AAAA (2001:500:1::53) missing from hints
Aug 10 08:41:17 pc daemon.warn named[5069]: checkhints: h.root-servers.net/AAAA (2001:500:1::803f:235) extra record in hints
Aug 10 08:41:18 pc daemon.warn named[5069]: checkhints: h.root-servers.net/A (198.97.190.53) missing from hints
Aug 10 08:41:18 pc daemon.warn named[5069]: checkhints: h.root-servers.net/A (128.63.2.53) extra record in hints
Aug 10 08:41:18 pc daemon.warn named[5069]: checkhints: h.root-servers.net/AAAA (2001:500:1::53) missing from hints
Aug 10 08:41:18 pc daemon.warn named[5069]: checkhints: h.root-servers.net/AAAA (2001:500:1::803f:235) extra record in hints
Aug 10 08:41:31 pc daemon.warn named[5069]: checkhints: h.root-servers.net/A (198.97.190.53) missing from hints
Aug 10 08:41:31 pc daemon.warn named[5069]: checkhints: h.root-servers.net/A (128.63.2.53) extra record in hints
Aug 10 08:41:31 pc daemon.warn named[5069]: checkhints: h.root-servers.net/AAAA (2001:500:1::53) missing from hints
Aug 10 08:41:31 pc daemon.warn named[5069]: checkhints: h.root-servers.net/AAAA (2001:500:1::803f:235) extra record in hints
Aug 10 08:41:36 pc daemon.warn named[5069]: checkhints: h.root-servers.net/A (198.97.190.53) missing from hints
Aug 10 08:41:36 pc daemon.warn named[5069]: checkhints: h.root-servers.net/A (128.63.2.53) extra record in hints
Aug 10 08:41:36 pc daemon.warn named[5069]: checkhints: h.root-servers.net/AAAA (2001:500:1::53) missing from hints
Aug 10 08:41:36 pc daemon.warn named[5069]: checkhints: h.root-servers.net/AAAA (2001:500:1::803f:235) extra record in hints
Aug 10 08:44:02 pc daemon.warn named[5069]: checkhints: h.root-servers.net/A (198.97.190.53) missing from hints
Aug 10 08:44:02 pc daemon.warn named[5069]: checkhints: h.root-servers.net/A (128.63.2.53) extra record in hints
Aug 10 08:44:02 pc daemon.warn named[5069]: checkhints: h.root-servers.net/AAAA (2001:500:1::53) missing from hints
Aug 10 08:44:02 pc daemon.warn named[5069]: checkhints: h.root-servers.net/AAAA (2001:500:1::803f:235) extra record in hints
Aug 10 08:45:22 pc daemon.warn named[5069]: checkhints: h.root-servers.net/A (198.97.190.53) missing from hints
Aug 10 08:45:22 pc daemon.warn named[5069]: checkhints: h.root-servers.net/A (128.63.2.53) extra record in hints
Aug 10 08:45:22 pc daemon.warn named[5069]: checkhints: h.root-servers.net/AAAA (2001:500:1::53) missing from hints
Aug 10 08:45:22 pc daemon.warn named[5069]: checkhints: h.root-servers.net/AAAA (2001:500:1::803f:235) extra record in hints
Aug 10 08:46:23 pc daemon.warn named[5069]: checkhints: h.root-servers.net/A (198.97.190.53) missing from hints
Aug 10 08:46:23 pc daemon.warn named[5069]: checkhints: h.root-servers.net/A (128.63.2.53) extra record in hints
Aug 10 08:46:23 pc daemon.warn named[5069]: checkhints: h.root-servers.net/AAAA (2001:500:1::53) missing from hints
Aug 10 08:46:23 pc daemon.warn named[5069]: checkhints: h.root-servers.net/AAAA (2001:500:1::803f:235) extra record in hints
Aug 10 08:51:18 pc daemon.warn named[5069]: checkhints: h.root-servers.net/A (198.97.190.53) missing from hints
Aug 10 08:51:18 pc daemon.warn named[5069]: checkhints: h.root-servers.net/A (128.63.2.53) extra record in hints
Aug 10 08:51:18 pc daemon.warn named[5069]: checkhints: h.root-servers.net/AAAA (2001:500:1::53) missing from hints
Aug 10 08:51:18 pc daemon.warn named[5069]: checkhints: h.root-servers.net/AAAA (2001:500:1::803f:235) extra record in hints
Aug 10 08:52:19 pc daemon.warn named[5069]: checkhints: h.root-servers.net/A (198.97.190.53) missing from hints
Aug 10 08:52:19 pc daemon.warn named[5069]: checkhints: h.root-servers.net/A (128.63.2.53) extra record in hints
Aug 10 08:52:19 pc daemon.warn named[5069]: checkhints: h.root-servers.net/AAAA (2001:500:1::53) missing from hints
Aug 10 08:52:19 pc daemon.warn named[5069]: checkhints: h.root-servers.net/AAAA (2001:500:1::803f:235) extra record in hints
Aug 10 08:53:55 pc daemon.warn named[5069]: checkhints: h.root-servers.net/A (198.97.190.53) missing from hints
Aug 10 08:53:55 pc daemon.warn named[5069]: checkhints: h.root-servers.net/A (128.63.2.53) extra record in hints
Aug 10 08:53:55 pc daemon.warn named[5069]: checkhints: h.root-servers.net/AAAA (2001:500:1::53) missing from hints
Aug 10 08:53:55 pc daemon.warn named[5069]: checkhints: h.root-servers.net/AAAA (2001:500:1::803f:235) extra record in hints
Aug 10 08:56:25 pc daemon.warn named[5069]: checkhints: h.root-servers.net/A (198.97.190.53) missing from hints
Aug 10 08:56:25 pc daemon.warn named[5069]: checkhints: h.root-servers.net/A (128.63.2.53) extra record in hints
Aug 10 08:56:25 pc daemon.warn named[5069]: checkhints: h.root-servers.net/AAAA (2001:500:1::53) missing from hints
Aug 10 08:56:25 pc daemon.warn named[5069]: checkhints: h.root-servers.net/AAAA (2001:500:1::803f:235) extra record in hints
Aug 10 08:57:24 pc daemon.warn named[5069]: checkhints: h.root-servers.net/A (198.97.190.53) missing from hints
Aug 10 08:57:24 pc daemon.warn named[5069]: checkhints: h.root-servers.net/A (128.63.2.53) extra record in hints
Aug 10 08:57:24 pc daemon.warn named[5069]: checkhints: h.root-servers.net/AAAA (2001:500:1::53) missing from hints
Aug 10 08:57:24 pc daemon.warn named[5069]: checkhints: h.root-servers.net/AAAA (2001:500:1::803f:235) extra record in hints
Aug 10 08:59:36 pc daemon.warn named[5069]: checkhints: h.root-servers.net/A (198.97.190.53) missing from hints
Aug 10 08:59:36 pc daemon.warn named[5069]: checkhints: h.root-servers.net/A (128.63.2.53) extra record in hints
Aug 10 08:59:36 pc daemon.warn named[5069]: checkhints: h.root-servers.net/AAAA (2001:500:1::53) missing from hints
Aug 10 08:59:36 pc daemon.warn named[5069]: checkhints: h.root-servers.net/AAAA (2001:500:1::803f:235) extra record in hints
Aug 10 08:59:52 pc daemon.warn named[5069]: checkhints: h.root-servers.net/A (198.97.190.53) missing from hints
Aug 10 08:59:52 pc daemon.warn named[5069]: checkhints: h.root-servers.net/A (128.63.2.53) extra record in hints
Aug 10 08:59:52 pc daemon.warn named[5069]: checkhints: h.root-servers.net/AAAA (2001:500:1::53) missing from hints
Aug 10 08:59:52 pc daemon.warn named[5069]: checkhints: h.root-servers.net/AAAA (2001:500:1::803f:235) extra record in hints
Aug 10 09:01:39 pc daemon.warn named[5069]: checkhints: h.root-servers.net/A (198.97.190.53) missing from hints
Aug 10 09:01:39 pc daemon.warn named[5069]: checkhints: h.root-servers.net/A (128.63.2.53) extra record in hints
Aug 10 09:01:39 pc daemon.warn named[5069]: checkhints: h.root-servers.net/AAAA (2001:500:1::53) missing from hints
Aug 10 09:01:39 pc daemon.warn named[5069]: checkhints: h.root-servers.net/AAAA (2001:500:1::803f:235) extra record in hints
Todos somos ignorantes, pero no todos ignoramos las mismas cosas
Avatar do usuário
amores123
BFW Very Participative
 
Mensagens: 391
Registrado em: Qui Jan 05, 2012 8:56 pm
Localização: peru
BrazilFW Box: Intel(R) Celeron(R) CPU 2.53GHz, 1GB Ram, HD 500Gb, Brazilfw 3.0.258rc11‏, Squid 3.1.20, Bfwcache 2.0, Qos.

Re: Micro Cortes en la red, Ataque DNS-REBINDING? [LOG]

Mensagempor audonei » Sáb Set 03, 2016 10:33 pm

estou com o mesmo problema alguem tem a solução?
edit: dns local desatualizado^^ use o dns do google e acaba se os problemas.
'E Sem Saber Que Era Impossível Ele Foi Lá e Fez'
Avatar do usuário
audonei
BFW Squid 3.5.x
BFW HaarpCache
BFW WebServer
BFW 3.x Update
 
Mensagens: 141
Registrado em: Ter Jul 21, 2015 9:43 am
BrazilFW Box: Intel(R) Core(TM) i3-3220 CPU @ 3.30GHz / Máquina: <Física> / CPU: <intel 3ª geração> / Memória: 8gb /
Link 200M /BFW/ultima versão x64 bits. / Serviços Ativos: ebackup/squid/mysql / Addons: EPM /squid3.5

Re: Micro Cortes en la red, Ataque DNS-REBINDING? [LOG]

Mensagempor BlackByte » Seg Set 05, 2016 9:47 am

Hola que tal
el problema parece venir por un cambio en el server dns root H
https://www.isc.org/blogs/h-root-will-change-its-addresses-on-1-december-2015-what-does-this-mean-for-you/
Saludos :o!
Avatar do usuário
BlackByte
BFW Add-on Developer
BFW Beneméritos
BFW Team
 
Mensagens: 459
Registrado em: Ter Fev 17, 2009 6:54 pm
Localização: Corrientes,Argentina
BrazilFW Box: 3.262 con Load Balance, Subredes y Dhcp
AddOn :Mysar + Bandwidthd + Guren + PHPMyAdmin +IfTop
AMD Phenom(tm) II X2 555 Processor @ (2x) 3.214 GHz 3 GB RAM HD 500Gb

Re: Micro Cortes en la red, Ataque DNS-REBINDING? [LOG]

Mensagempor audonei » Qua Set 21, 2016 5:11 pm

atualizei o bfw e o problema persiste! alguem tem uma solução:?
'E Sem Saber Que Era Impossível Ele Foi Lá e Fez'
Avatar do usuário
audonei
BFW Squid 3.5.x
BFW HaarpCache
BFW WebServer
BFW 3.x Update
 
Mensagens: 141
Registrado em: Ter Jul 21, 2015 9:43 am
BrazilFW Box: Intel(R) Core(TM) i3-3220 CPU @ 3.30GHz / Máquina: <Física> / CPU: <intel 3ª geração> / Memória: 8gb /
Link 200M /BFW/ultima versão x64 bits. / Serviços Ativos: ebackup/squid/mysql / Addons: EPM /squid3.5

Re: Micro Cortes en la red, Ataque DNS-REBINDING? [LOG]

Mensagempor reginaldo » Qua Set 21, 2016 8:07 pm

Boa Noite!

Este assunto foi relatado no Bug Tracker do BFW?

Acho que não, pois o Woshman teria "acertado" na realese 3.0.262.
Contribua para que o Projeto BFW permaneça no ar, Doe Click aqui
Contribua com o reginaldo, Doe, favor enviar e-mail para reginaldo@brazilfw.com.br
-----------------------------------------------------------------------------------------------------
"Disciplina é liberdade. Compaixão é fortaleza. Ter bondade é ter coragem" (Há Tempos [Dado Villa-Lobos/Renato Russo/Marcelo Bonfá])
Avatar do usuário
reginaldo
BFW Mediator
BFW Documenter
BFW Manager
BFW 3.x Update
 
Mensagens: 12686
Registrado em: Sáb Ago 27, 2005 12:10 pm
Localização: Rio de Janeiro - RJ
BrazilFW Box: Máquina Física
CPU: Intel Core i3 Model 530
Memória: 8.00 GiB / 2 Links
BFW 3.0.262 64 bits
Serviços Ativos: Control MAC, QOS
Addons: EBackup, EPM e Squid 3.5.x


Voltar para BrazilFW 3.x

Quem está online

Usuários navegando neste fórum: Nenhum usuário registrado e 7 visitantes

cron