JINMEI Tatuya / 神明達哉
Jinmei_Tatuya at isc.org
Wed Feb 25 04:01:13 UTC 2009
At Tue, 24 Feb 2009 15:10:36 -0500,
Todd <canadaboy at gmail.com> wrote:
> The servers in question are running a mix of BIND versions .. 9.2.3,
> 9.2.4, 9.3.2, 9.3.4, 9.4.1, 9.4.2-p2, the majority are 9.3.4 and
Then are confused somehow. Among above, the only version that could
cause the "too many open file descriptors" problem is 9.4.2-P2 (this
doesn't mean you can safely use the others; they are vulnerable to the
so-called 'Kaminsky' caching poisoning attacks).
Regarding 9.4.2-P2, I'd strongly recommend to upgrade to 9.4.3-P1.
9.4.2-P2 has a fundamental performance problem due to the use of
inefficient socket API, which has been solved in 9.4.3 and onward.
If you still have the same problem with 9.4.3-P1, please report it
Internet Systems Consortium, Inc.
More information about the bind-users