Hi all, Are you using bind as a local caching resolver on your exits? The DNS resolver on our exit crashed over the weekend due to this bug: https://kb.isc.org/article/AA-01466 It hasn't been patched yet in Debian: https://security-tracker.debian.org/tracker/CVE-2017-3137 So I have added a file: /etc/systemd/system/bind9.service.d/restart-on-abort.conf With the text: [Service] Restart=on-abort This should work for any systemd/bind9 Linux system. T -- Tim Wilson-Brown (teor) teor2345 at gmail dot com PGP C855 6CED 5D90 A0C5 29F6 4D43 450C BA7F 968F 094B ricochet:ekmygaiu4rzgsk6n xmpp: teor at torproject dot org ------------------------------------------------------------------------
Attachment:
signature.asc
Description: Message signed with OpenPGP
_______________________________________________ tor-relays mailing list tor-relays@xxxxxxxxxxxxxxxxxxxx https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays