[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

[tor-relays] bind DNS Crash on Exit



Hi all,

Are you using bind as a local caching resolver on your exits?

The DNS resolver on our exit crashed over the weekend due to this bug:
https://kb.isc.org/article/AA-01466

It hasn't been patched yet in Debian:
https://security-tracker.debian.org/tracker/CVE-2017-3137

So I have added a file:
/etc/systemd/system/bind9.service.d/restart-on-abort.conf

With the text:
[Service]
Restart=on-abort

This should work for any systemd/bind9 Linux system.

T
--
Tim Wilson-Brown (teor)

teor2345 at gmail dot com
PGP C855 6CED 5D90 A0C5 29F6 4D43 450C BA7F 968F 094B
ricochet:ekmygaiu4rzgsk6n
xmpp: teor at torproject dot org
------------------------------------------------------------------------

Attachment: signature.asc
Description: Message signed with OpenPGP

_______________________________________________
tor-relays mailing list
tor-relays@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays