SuSE: bind (SUSE-SA:2008:033)


 
Thread Tools Search this Thread
Special Forums Cybersecurity Security Advisories (RSS) SuSE: bind (SUSE-SA:2008:033)
# 1  
Old 07-11-2008
SuSE: bind (SUSE-SA:2008:033)

LinuxSecurity.com: The new version of bind uses a random transaction-ID (TRXID) and a random UDP source-port for DNS queries to address DNS cache poisoning attacks possible because of the "birthday paradox" and an attack discovered by Dan Kaminsky. Unfortunately we do not have details about Kaminsky's attack and have to trust the statement that a random UDP source-port is sufficient to stop it.

More...
Login or Register to Ask a Question

Previous Thread | Next Thread
Login or Register to Ask a Question
NMBLOOKUP4(1)							   User Commands						     NMBLOOKUP4(1)

NAME
nmblookup4 - NetBIOS over TCP/IP client used to lookup NetBIOS names SYNOPSIS
nmblookup4 [-M] [-R] [-S] [-r] [-A] [-h] [-B <broadcast address>] [-U <unicast address>] [-d <debug level>] [-s <smb config file>] [-i <NetBIOS scope>] [-T] [-f] {name} DESCRIPTION
This tool is part of the samba(7) suite. nmblookup4 is used to query NetBIOS names and map them to IP addresses in a network using NetBIOS over TCP/IP queries. The options allow the name queries to be directed at a particular IP broadcast area or to a particular machine. All queries are done over UDP. OPTIONS
-M Searches for a master browser by looking up the NetBIOS name with a type of 0x1d. If name is "-" then it does a lookup on the special name __MSBROWSE__. Please note that in order to use the name "-", you need to make sure "-" isn't parsed as an argument, e.g. use : nmblookup4 -M -- -. -R Set the recursion desired bit in the packet to do a recursive lookup. This is used when sending a name query to a machine running a WINS server and the user wishes to query the names in the WINS server. If this bit is unset the normal (broadcast responding) NetBIOS processing code on a machine is used instead. See RFC1001, RFC1002 for details. -S Once the name query has returned an IP address then do a node status query as well. A node status query returns the NetBIOS names registered by a host. -r Try and bind to UDP port 137 to send and receive UDP datagrams. The reason for this option is a bug in Windows 95 where it ignores the source port of the requesting packet and only replies to UDP port 137. Unfortunately, on most UNIX systems root privilege is needed to bind to this port, and in addition, if the nmbd(8) daemon is running on this machine it also binds to this port. -A Interpret name as an IP Address and do a node status query on this address. -B <broadcast address> Send the query to the given broadcast address. Without this option the default behavior of nmblookup4 is to send the query to the broadcast address of the network interfaces as either auto-detected or defined in the interfaces[1] parameter of the smb.conf(5) file. -U <unicast address> Do a unicast query to the specified address or host unicast address. This option (along with the -R option) is needed to query a WINS server. -T This causes any IP addresses found in the lookup to be looked up via a reverse DNS lookup into a DNS name, and printed out before each IP address .... NetBIOS name pair that is the normal output. -f Show which flags apply to the name that has been looked up. Possible answers are zero or more of: Response, Authoritative, Truncated, Recursion_Desired, Recursion_Available, Broadcast. name This is the NetBIOS name being queried. Depending upon the previous options this may be a NetBIOS name or IP address. If a NetBIOS name then the different name types may be specified by appending '#<type>' to the name. This name may also be '*', which will return all registered names within a broadcast area. EXAMPLES
nmblookup4 can be used to query a WINS server (in the same way nslookup is used to query DNS servers). To query a WINS server, nmblookup4 must be called like this: nmblookup4 -U server -R 'name' For example, running : nmblookup4 -U samba.org -R 'IRIX#1B' would query the WINS server samba.org for the domain master browser (1B name type) for the IRIX workgroup. VERSION
This man page is correct for version 3 of the Samba suite. SEE ALSO
nmbd(8), samba(7), and smb.conf(5). AUTHOR
The original Samba software and related utilities were created by Andrew Tridgell. Samba is now developed by the Samba Team as an Open Source project similar to the way the Linux kernel is developed. The original Samba man pages were written by Karl Auer. The man page sources were converted to YODL format (another excellent piece of Open Source software, available at ftp://ftp.icce.rug.nl/pub/unix/[2]) and updated for the Samba 2.0 release by Jeremy Allison. The conversion to DocBook for Samba 2.2 was done by Gerald Carter. The conversion to DocBook XML 4.2 for Samba 3.0 was done by Alexander Bokovoy. NOTES
1. interfaces [set $man.base.url.for.relative.links]/smb.conf.5.html#INTERFACES 2. ftp://ftp.icce.rug.nl/pub/unix/ ftp://ftp.icce.rug.nl/pub/unix/ Samba 3.2 06/17/2014 NMBLOOKUP4(1)