RE: [cobalt-security] Be very careful! BIND patch in RaQ4-All-System-2.0.1-14185.pkg

["Eric Frisch" <ericf@xxxxxxxxxxx>]

>
> On Thursday 20 June 2002 11:13 am, Eric Frisch wrote:
> > If you have BIND configurations that you maintain outside of
> the Cobalt GUI
> > this update will silently burn down all your zone files in
> /etc/named and
> > your /etc/named.conf file.  The GUI tool didn't have a rich
> enough feature
> > set for our very large DNS config so we simply ignored it, some
> things just
> > don't want to be ignored I guess . . .  I guess I will set about playing
> > hide the zone file now.
> >
>
> We never use the GUI for DNS,
> We seen no issues with /etc/named nor /etc/named.conf file.
> Are you sure someone didn't go in and use the GUI for DNS, as that
> will wipe you out.

We have seen in the past where named.conf will get burned down by the GUI
tool but I don't think the zones went way.  We know not to do that based on
previous experience . . .  This issue coincided with applying the patch on
two separate servers, no other configuration activity took place.
Fortunately we staggered updates to our primary and secondary boxes as a
normal precaution.  We will try to hide things just to be safe, probably
should have done that previously.

>
>
> --
> Gerald Waugh
> http://frontstreetnetworks.com  SOHO Networks & Web Site Hosting
> Front Street Networks LLC     voice +1 203 785 0699 * fax +1 203 785 1787
> 229 Front Street, Ste. #C, New Haven CT 06513-3203
>
> _______________________________________________
> cobalt-security mailing list
> cobalt-security@xxxxxxxxxxxxxxx
> http://list.cobalt.com/mailman/listinfo/cobalt-security
>