Something nasty happening on DNS servers.

3 msg	DNS forwarding or sort of...
2 msg	Mx round robin issue with 4.9
4 msg	DNS Forwarding/Stub zones?
2 msg	about ns record
2 msg	off topic : what is the background of fake tld ...

Something nasty happening on DNS servers.
\ emmpey (15 Aug 2006)
. \ Peter Peters (16 Aug 2006)
. \ emmpey (21 Aug 2006)

5 msg	Problem with hosting providers reverse DNS
5 msg	memcluster.c:436: INSIST(stats[size].gets != 0U...
1 msg	(No Subject)
2 msg	nslookup: relocation error: nslookup: undefined...
3 msg	Can't update zone: 'not authoritative'
6 msg	Open DNS Server
12 msg	bind-9.3.2 / CPU issue.
1 msg	Apology
1 msg	Problems with em interfaces on FreeBSD 6.1
3 msg	i m continously receiving mails from this unkno...
2 msg	is it possible that locla DNS server override i...
3 msg	host works, dig doesn't - BIND 9.3.2 puzzle
2 msg	1.5GB limit?
8 msg	DNS zone to host only certain records & for...

Subject:	Something nasty happening on DNS servers.
Group:	Bind-users
From:	emmpey
Date:	15 Aug 2006

Hi all,

I'm running BIND 9.2.5, one master and one slave. They are on a DMZ
(network 172.16.0) behind an iptables firewall.

A few hours ago both servers stopped resolving external addresses.

On the machines that host named i couldn't use dig or nslookup to
resolve names using my ISPs nameserver (or any nameservers for that
matter), server timeout message.

I could ping out to the ISP's nameserver fine. just dig/nslookup
timeout.

Other hosts on the DMZ resolve fine using external nameserver, as do my
LAN (192.168) hosts, it's just the two machines that were hosting named
that timeout.

Im using NAT so to any external nameservers my lookups appear to be
coming from the same host, so I suspect that the master and slave hosts
have been hacked. I could be totally wrong.

Has anyone seen a case where dig/nslookup times-out like that - I just
don't understand it.

I don't have any DNS for mail and web at the moment. I'm building
another nameserver now so hopefully should have DNS back sooner or
later.

Has anyone seen anything like this before?