<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Trinity Net</title>
	<atom:link href="http://www.trinitynet.co.nz/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.trinitynet.co.nz</link>
	<description>Geeky stuff</description>
	<lastBuildDate>Fri, 18 Jun 2010 22:49:11 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.0.1</generator>
		<item>
		<title>Debugging high Roundcube server load</title>
		<link>http://www.trinitynet.co.nz/2010/06/debugging-high-roundcube-server-load/</link>
		<comments>http://www.trinitynet.co.nz/2010/06/debugging-high-roundcube-server-load/#comments</comments>
		<pubDate>Fri, 18 Jun 2010 22:49:11 +0000</pubDate>
		<dc:creator>segfault</dc:creator>
				<category><![CDATA[Mail]]></category>
		<category><![CDATA[Web Serving]]></category>
		<category><![CDATA[Apache]]></category>
		<category><![CDATA[Roundcube]]></category>

		<guid isPermaLink="false">http://www.trinitynet.co.nz/?p=115</guid>
		<description><![CDATA[Recently I&#8217;ve been attempting to fix a problem with high load on a server that is dedicated to serving Roundcube Webmail. The load issue appeared after migrating users off Squirrelmail and onto Roundcube. The symptoms are: high load average and &#8230; <a href="http://www.trinitynet.co.nz/2010/06/debugging-high-roundcube-server-load/">Continue reading <span class="meta-nav">&#8594;</span></a>]]></description>
			<content:encoded><![CDATA[<p>Recently I&#8217;ve been attempting to fix a problem with high load on a server that is dedicated to serving <a href="http://www.roundcube.net">Roundcube Webmail</a>. The load issue appeared after migrating users off <a href="http://www.squirrelmail.org">Squirrelmail</a> and onto Roundcube. The symptoms are: high load average and lots of Apache child processes connected to the IMAP server sitting in the CLOSE_WAIT. For the most part, Apache was serving up the pages in a timely manner. I managed to deal with the load issue by killing off the stale child processes with a script, however this was no long term fix.</p>
<p>Many people have reported this issue over the last few years. I joined the list of people <a href="http://trac.roundcube.net/ticket/1485975">complaining about this problem</a> in the Roundcube Trac in an effort to solve the issue.</p>
<p>The server was a fairly standard setup: Ubuntu 8.04 LTS, Apache2, PHP5 (mod_php), Roundcube 0.3 and Imapproxy. In order to try to fix the load problem, the server was upgraded to Ubuntu 10.04 LTS and <a href="http://pecl.php.net/package/APC">php-apc</a> was installed. This resulted in crippling load on the server and very slow page load times.</p>
<p>Further investigation and a good hunch revealed that MySQL needed tuning. Up until this point, MySQL had been running with the default tuning options. As Roundcube stores all its data using InnoDB, the InnoDB settings had to be tuned. Changing the following options caused the webmail to instantly perform well again.</p>

<div class="wp_syntax"><div class="code"><pre class="python" style="font-family:monospace;">innodb_buffer_pool_size = 64M
innodb_additional_mem_pool_size = 20M</pre></div></div>

<p>php-apc was doing a great job and the cache hits for it were almost 100%. The issue with Apache children hanging around still persisted however. I began to think that the cause might be bottlenecks that were being thrown in Roundcube&#8217;s way.</p>
<p>I suspected that imapproxy may be one bottleneck in the system. Netstat revealed that there were 200 IMAP connections open by imapproxy. Once it was disabled, this fell to a handful. The Roundcube interface became very responsive and the load issue on the server went away. Now there are no Apache children that get stuck in the CLOSE_WAIT state.</p>
<p>If you&#8217;re having similar problems, try the above solutions that worked for me. If they don&#8217;t work, I&#8217;d suggest looking for other bottlenecks on your system as Roundcube seems to be quite sensitive to them.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.trinitynet.co.nz/2010/06/debugging-high-roundcube-server-load/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
		<item>
		<title>Sacred music resources for the Mass</title>
		<link>http://www.trinitynet.co.nz/2009/10/sacred-music-resources-for-the-mass/</link>
		<comments>http://www.trinitynet.co.nz/2009/10/sacred-music-resources-for-the-mass/#comments</comments>
		<pubDate>Wed, 28 Oct 2009 07:59:35 +0000</pubDate>
		<dc:creator>segfault</dc:creator>
				<category><![CDATA[Catholic]]></category>
		<category><![CDATA[Mass]]></category>
		<category><![CDATA[Music]]></category>

		<guid isPermaLink="false">http://www.trinitynet.co.nz/?p=90</guid>
		<description><![CDATA[There are so many sites on the internet now that offer sacred music suitable for the Mass that I have started losing track of them. This is my attempt to bring them all together on one page. I&#8217;ll try to &#8230; <a href="http://www.trinitynet.co.nz/2009/10/sacred-music-resources-for-the-mass/">Continue reading <span class="meta-nav">&#8594;</span></a>]]></description>
			<content:encoded><![CDATA[<p>There are so many sites on the internet now that offer sacred music suitable for the Mass that I have started losing track of them. This is my attempt to bring them all together on one page. I&#8217;ll try to keep this up to date as I find new sites.</p>
<p><strong>Polyphony</strong></p>
<ul>
<li><a href="http://www.cpdl.org/wiki/index.php/Main_Page">Choral Wiki</a></li>
</ul>
<p><strong>Organ/Hymnody</strong></p>
<ul>
<li><a href="http://www.musicasacra.com/english-hymns/">English hymns in the commons</a></li>
<li><a href="http://www.musicforliturgy.org">Music for Liturgy</a></li>
</ul>
<p><strong>Propers</strong></p>
<ul>
<li><a href="http://www.renegoupil.org">MP3&#8242;s and notation of chanted Latin propers of the Extraordinary Form</a></li>
<li><a href="http://www.isaacjogues.org">MP3&#8242;s and notation of chanted Latin propers of the Ordinary Form</a></li>
<li><a href="http://www.institute-christ-king.org/latin-mass-resources/sacred-music/">Notation of chanted Latin propers of the Extraordinary Form</a></li>
<li><a href="http://sacredmusicproject.com/st-meinrad-chant/index/">Notation of chanted English propers of the Ordinary Form</a></li>
<li><a href="http://musicasacra.com/books/simplechoralgradual.pdf">Simple Choral Gradual &#8211; Antiphonal</a></li>
<li><a href="http://www.musicasacra.com/books/americangradual1.pdf">Chanted propers adapted to English</a></li>
<li><a href="http://www.musicasacra.com/pdf/liberusualis.pdf">Liber Usualis</a></li>
</ul>
<p><strong>Ordinaries</strong></p>
<ul>
<li><a href="http://www.christusrex.org/www2/cantgreg/kyriale_eng.html">MP3 recordings of ordinaries including notation</a></li>
</ul>
<p><strong>Psalmody</strong></p>
<ul>
<li><a href="http://www.musicforliturgy.org/">Plain modal English psalms</a></li>
<li><a href="http://chabanelpsalms.org">Chabanel responsorial psalm project</a></li>
</ul>
]]></content:encoded>
			<wfw:commentRss>http://www.trinitynet.co.nz/2009/10/sacred-music-resources-for-the-mass/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>shadowAccount attributes in LDAP</title>
		<link>http://www.trinitynet.co.nz/2009/06/shadowaccount-attributes-in-ldap/</link>
		<comments>http://www.trinitynet.co.nz/2009/06/shadowaccount-attributes-in-ldap/#comments</comments>
		<pubDate>Sat, 06 Jun 2009 23:27:06 +0000</pubDate>
		<dc:creator>segfault</dc:creator>
				<category><![CDATA[LDAP]]></category>

		<guid isPermaLink="false">http://www.trinitynet.co.nz/?p=84</guid>
		<description><![CDATA[An explanation of the shadowAccount attributes in LDAP. These correspond to the fields in /etc/shadow shadowLastChange &#8211; number of days since January 1, 1970 that the password was last changed. shadowMin &#8211; number of days before the password can be &#8230; <a href="http://www.trinitynet.co.nz/2009/06/shadowaccount-attributes-in-ldap/">Continue reading <span class="meta-nav">&#8594;</span></a>]]></description>
			<content:encoded><![CDATA[<p>An explanation of the shadowAccount attributes in LDAP. These correspond to the fields in /etc/shadow</p>
<p><strong>shadowLastChange</strong> &#8211; number of days since January 1, 1970 that the password was last changed.<br />
<strong>shadowMin</strong> &#8211; number of days before the password can be changed (typically 0).<br />
<strong>shadowMax</strong> &#8211; number of days before the password must be changed (typically 99999).<br />
<strong>shadowWarning</strong> &#8211; number of days to warn user of an expiring password (typically 7).<br />
<strong>shadowInactive</strong> &#8211; number of days after password expires that account is disabled.<br />
<strong>shadowExpire</strong> &#8211; number of days since January 1, 1970 that the account was disabled.<br />
<strong>shadowFlag</strong> &#8211; reserved.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.trinitynet.co.nz/2009/06/shadowaccount-attributes-in-ldap/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Setting up tftpd on Debian/Ubuntu</title>
		<link>http://www.trinitynet.co.nz/2009/03/setting-up-tftpd-on-debianubuntu/</link>
		<comments>http://www.trinitynet.co.nz/2009/03/setting-up-tftpd-on-debianubuntu/#comments</comments>
		<pubDate>Mon, 30 Mar 2009 04:31:29 +0000</pubDate>
		<dc:creator>segfault</dc:creator>
				<category><![CDATA[Linux]]></category>
		<category><![CDATA[Debian]]></category>
		<category><![CDATA[Ubuntu]]></category>

		<guid isPermaLink="false">http://www.trinitynet.co.nz/?p=78</guid>
		<description><![CDATA[The documentation on setting up tftpd on Debian/Ubuntu is pretty sparse Here is how you do it: sudo apt-get install tftpd &#38;&#38; sudo mkdir /srv/tftp &#160; # If you want to be able to upload to the TFTP server sudo &#8230; <a href="http://www.trinitynet.co.nz/2009/03/setting-up-tftpd-on-debianubuntu/">Continue reading <span class="meta-nav">&#8594;</span></a>]]></description>
			<content:encoded><![CDATA[<p>The documentation on setting up tftpd on Debian/Ubuntu is pretty sparse Here is how you do it:</p>

<div class="wp_syntax"><div class="code"><pre class="bash" style="font-family:monospace;"><span style="color: #c20cb9; font-weight: bold;">sudo</span> <span style="color: #c20cb9; font-weight: bold;">apt-get</span> <span style="color: #c20cb9; font-weight: bold;">install</span> tftpd <span style="color: #000000; font-weight: bold;">&amp;&amp;</span> <span style="color: #c20cb9; font-weight: bold;">sudo</span> <span style="color: #c20cb9; font-weight: bold;">mkdir</span> <span style="color: #000000; font-weight: bold;">/</span>srv<span style="color: #000000; font-weight: bold;">/</span>tftp
&nbsp;
<span style="color: #666666; font-style: italic;"># If you want to be able to upload to the TFTP server</span>
<span style="color: #c20cb9; font-weight: bold;">sudo</span> <span style="color: #c20cb9; font-weight: bold;">chown</span> nobody <span style="color: #000000; font-weight: bold;">/</span>srv<span style="color: #000000; font-weight: bold;">/</span>tftp</pre></div></div>

]]></content:encoded>
			<wfw:commentRss>http://www.trinitynet.co.nz/2009/03/setting-up-tftpd-on-debianubuntu/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Setting up IOS clock for New Zealand timezones</title>
		<link>http://www.trinitynet.co.nz/2009/03/setting-up-ios-clock-for-new-zealand-timezones/</link>
		<comments>http://www.trinitynet.co.nz/2009/03/setting-up-ios-clock-for-new-zealand-timezones/#comments</comments>
		<pubDate>Mon, 30 Mar 2009 00:12:56 +0000</pubDate>
		<dc:creator>segfault</dc:creator>
				<category><![CDATA[Cisco]]></category>
		<category><![CDATA[IOS]]></category>

		<guid isPermaLink="false">http://www.trinitynet.co.nz/?p=62</guid>
		<description><![CDATA[First set the clock to the current time: clock set 13:08:30 30 March 2008 Then tell IOS what the New Zealand offset is and when daylight savings comes in: clock timezone NZST 12 clock summer-time NZDT recurring last Sun Sep &#8230; <a href="http://www.trinitynet.co.nz/2009/03/setting-up-ios-clock-for-new-zealand-timezones/">Continue reading <span class="meta-nav">&#8594;</span></a>]]></description>
			<content:encoded><![CDATA[<p>First set the clock to the current time:</p>

<div class="wp_syntax"><div class="code"><pre class="bash" style="font-family:monospace;">clock <span style="color: #000000; font-weight: bold;">set</span> <span style="color: #000000;">13</span>:08:<span style="color: #000000;">30</span> <span style="color: #000000;">30</span> March <span style="color: #000000;">2008</span></pre></div></div>

<p>Then tell IOS what the New Zealand offset is and when daylight savings comes in:</p>

<div class="wp_syntax"><div class="code"><pre class="bash" style="font-family:monospace;">clock timezone NZST <span style="color: #000000;">12</span>
clock summer-time NZDT recurring <span style="color: #c20cb9; font-weight: bold;">last</span> Sun Sep <span style="color: #000000;">2</span>:00 <span style="color: #000000;">1</span> Sun Apr <span style="color: #000000;">3</span>:00</pre></div></div>

<p>The official Cisco documentation is <a href="http://www.cisco.com/en/US/docs/ios/12_3t/fun/command/reference/cfrgt_01.html#wp1099646">here</a>.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.trinitynet.co.nz/2009/03/setting-up-ios-clock-for-new-zealand-timezones/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Make your own Cisco RJ45 to DB9 console cable</title>
		<link>http://www.trinitynet.co.nz/2009/03/make-your-own-cisco-rj45-to-db9-console-cable/</link>
		<comments>http://www.trinitynet.co.nz/2009/03/make-your-own-cisco-rj45-to-db9-console-cable/#comments</comments>
		<pubDate>Sun, 29 Mar 2009 03:33:49 +0000</pubDate>
		<dc:creator>segfault</dc:creator>
				<category><![CDATA[Cisco]]></category>
		<category><![CDATA[Hardware]]></category>

		<guid isPermaLink="false">http://www.trinitynet.co.nz/?p=56</guid>
		<description><![CDATA[Today I purchased a Cisco 2950 switch and needed a console cable (RJ45 to DB9) so that I could set the switch up. Rather than pay through the nose for a pre-made cable, I realised that I could make my &#8230; <a href="http://www.trinitynet.co.nz/2009/03/make-your-own-cisco-rj45-to-db9-console-cable/">Continue reading <span class="meta-nav">&#8594;</span></a>]]></description>
			<content:encoded><![CDATA[<p><img class="size-thumbnail wp-image-57 alignright" title="Cisco Console Cable" src="http://www.trinitynet.co.nz/wp-content/uploads/2009/03/rollover_cable-150x150.gif" alt="Cisco Console Cable" width="150" height="150" /></p>
<p>Today I purchased a Cisco 2950 switch and needed a console cable (RJ45 to DB9) so that I could set the switch up. Rather than pay through the nose for a pre-made cable, I realised that I could <a title="Cisco Console Cable Pinout" href="http://pinouts.ru/SerialPortsCables/CiscoConsole9_pinout.shtml">make my own one from an old serial cable</a>. You just need a spare RJ45 plug and a crimper.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.trinitynet.co.nz/2009/03/make-your-own-cisco-rj45-to-db9-console-cable/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>CCNA Network Simulator</title>
		<link>http://www.trinitynet.co.nz/2009/03/ccna-network-simulator/</link>
		<comments>http://www.trinitynet.co.nz/2009/03/ccna-network-simulator/#comments</comments>
		<pubDate>Mon, 23 Mar 2009 10:12:19 +0000</pubDate>
		<dc:creator>segfault</dc:creator>
				<category><![CDATA[Cisco]]></category>

		<guid isPermaLink="false">http://www.trinitynet.co.nz/?p=49</guid>
		<description><![CDATA[InformIT have the Cisco Press CCENT ICND1 640-822 Network Simulator on sale for only $75 USD. As a special deal until the end of May, you will receive a free copy of the CCNA ICND2 640-816 Network Simulator when it &#8230; <a href="http://www.trinitynet.co.nz/2009/03/ccna-network-simulator/">Continue reading <span class="meta-nav">&#8594;</span></a>]]></description>
			<content:encoded><![CDATA[<p>InformIT have the Cisco Press <strong><a title="CCENT ICND1 640-822 Network Simulator" href="http://www.informit.com/store/product.aspx?isbn=1587202174">CCENT ICND1 640-822 Network Simulator</a></strong> on sale for only $75 USD. As a special deal until the end of May, you will receive a free copy of the CCNA ICND2 640-816 Network Simulator when it is released in June. That&#8217;s a saving of $75 USD! Both of these combined will provide you with all the labs that you need to know for your CCNA exam. For a review, <a title="CCENT ICND1 640-822 Network Simulator Review" href="http://shouldhavegonewithcisco.com/2009/03/13/book-review-ccent-network-simulator/">click here</a>.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.trinitynet.co.nz/2009/03/ccna-network-simulator/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Omnibus update: Django 1.0, GeoDjango, Google Maps SRID</title>
		<link>http://www.trinitynet.co.nz/2008/10/omnibus-update-django-10-geodjango-google-maps-srid/</link>
		<comments>http://www.trinitynet.co.nz/2008/10/omnibus-update-django-10-geodjango-google-maps-srid/#comments</comments>
		<pubDate>Wed, 08 Oct 2008 01:21:41 +0000</pubDate>
		<dc:creator>segfault</dc:creator>
				<category><![CDATA[Django]]></category>
		<category><![CDATA[Mapping]]></category>
		<category><![CDATA[GIS]]></category>
		<category><![CDATA[Google Maps]]></category>

		<guid isPermaLink="false">http://www.trinitynet.co.nz/?p=44</guid>
		<description><![CDATA[Django 1.0 has been released. I haven&#8217;t had a chance to play around with it yet, but it is a vast improvement on 0.97. You can read the release notes here. GeoDjango is a geographic framework for Django that is &#8230; <a href="http://www.trinitynet.co.nz/2008/10/omnibus-update-django-10-geodjango-google-maps-srid/">Continue reading <span class="meta-nav">&#8594;</span></a>]]></description>
			<content:encoded><![CDATA[<p><a href="http://www.djangoproject.com">Django</a> 1.0 has been released. I haven&#8217;t had a chance to play around with it yet, but it is a vast improvement on 0.97. You can read the release notes <a href="http://docs.djangoproject.com/en/dev/releases/1.0/">here</a>.</p>
<p><a href="http://geodjango.org">GeoDjango</a> is a geographic framework for Django that is now included as part of the Django distribution. It looks fairly good and I&#8217;ll be using it on some upcoming projects. There are some presentations <a href="http://geodjango.org/presentations/">here</a> if you want to get an idea of how it works.</p>
<p>Google Maps has its own SRID: <a href="http://www.davidmcgettigan.com/?p=219">900913</a>. 1337-speak for Google. If you want to use it with PostGIS, you&#8217;ll have to add the definition to the <em>spatial_ref_sys</em> table.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.trinitynet.co.nz/2008/10/omnibus-update-django-10-geodjango-google-maps-srid/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Setting up a Dynalink RTA1335 in half-bridge mode</title>
		<link>http://www.trinitynet.co.nz/2008/07/setting-up-a-dynalink-rta1335-in-half-bridge-mode/</link>
		<comments>http://www.trinitynet.co.nz/2008/07/setting-up-a-dynalink-rta1335-in-half-bridge-mode/#comments</comments>
		<pubDate>Thu, 10 Jul 2008 06:55:52 +0000</pubDate>
		<dc:creator>segfault</dc:creator>
				<category><![CDATA[Hardware]]></category>
		<category><![CDATA[Tips]]></category>
		<category><![CDATA[ADSL]]></category>
		<category><![CDATA[Dynalink]]></category>
		<category><![CDATA[Linksys]]></category>

		<guid isPermaLink="false">http://www.trinitynet.co.nz/?p=41</guid>
		<description><![CDATA[Ben has a great tutorial on setting up a Dynalink RTA1320 or RTA1335 in half bridge mode so that you can have a world routable IP on a separate router (ie, a Linksys WRT54G). I have pretty much the same &#8230; <a href="http://www.trinitynet.co.nz/2008/07/setting-up-a-dynalink-rta1335-in-half-bridge-mode/">Continue reading <span class="meta-nav">&#8594;</span></a>]]></description>
			<content:encoded><![CDATA[<p><a href="http://www.dynalink.co.nz/cms/index.php?page=adsl2-4-port-modem-router-rta1335"><img class="alignleft size-thumbnail wp-image-38" title="Dynalink RTA1335" src="http://www.trinitynet.co.nz/wp-content/uploads/2008/07/rta1335-133x150.jpg" alt="Dynalink RTA1335" width="133" height="150" /></a>Ben has a great <a href="http://www.ben.geek.nz/adsl-routing-solution-in-detail/">tutorial</a> on setting up a Dynalink RTA1320 or RTA1335 in half bridge mode so that you can have a world routable IP on a separate router (ie, a Linksys WRT54G). I have pretty much the same setup as Ben &#8211; the only difference is that I have a Dynalink RTA1335.</p>
<p>I can highly recommend these Dynalink products. So far I haven&#8217;t had any problems and I&#8217;m surprised at the quality of the firmware &#8211; far better than products from much bigger companies (ie Linksys, D-Link, etc). I can also highly recommend the <a href="http://www.polarcloud.com/tomato">Tomato firmware</a> for the Linksys WRT54G wireless router. I used to run <a href="http://www.dd-wrt.com">DD-WRT</a> and was reluctant to move to Tomato because DD-WRT was quite good. After having moved though, I&#8217;m wishing that I had done it earlier. Tomato does everything that I need and it does it well.</p>
<p>One particular feature that I can&#8217;t live without is the bandwidth graphs in Tomato. There is also a feature to save the data usage logs to an SMB share so that if you have to restart your router, historical usage data can still be shown. Another feature that I&#8217;m quite happy about is the ability to force clients to use only WPA2 + AES to connect to the router. I ultimately want my network to be as secure as possible and forcing clients to use WPA2 + AES is a good way of doing that.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.trinitynet.co.nz/2008/07/setting-up-a-dynalink-rta1335-in-half-bridge-mode/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Major DNS vulnerability discovered</title>
		<link>http://www.trinitynet.co.nz/2008/07/major-dns-vulnerability-discovered/</link>
		<comments>http://www.trinitynet.co.nz/2008/07/major-dns-vulnerability-discovered/#comments</comments>
		<pubDate>Thu, 10 Jul 2008 04:45:00 +0000</pubDate>
		<dc:creator>segfault</dc:creator>
				<category><![CDATA[Tips]]></category>
		<category><![CDATA[BIND]]></category>
		<category><![CDATA[DNS]]></category>
		<category><![CDATA[Vulnerability]]></category>

		<guid isPermaLink="false">http://www.trinitynet.co.nz/?p=36</guid>
		<description><![CDATA[Dan Kaminsky recently discovered a vulnerability in the DNS protocol that could lead to DNS cache poisoning attacks. When a DNS lookup is made, the DNS server returns a random query id between 1 and 65,000. What Dan found is &#8230; <a href="http://www.trinitynet.co.nz/2008/07/major-dns-vulnerability-discovered/">Continue reading <span class="meta-nav">&#8594;</span></a>]]></description>
			<content:encoded><![CDATA[<p><a href="http://www.doxpara.com/">Dan Kaminsky</a> recently discovered a vulnerability in the DNS protocol that could lead to DNS cache poisoning attacks. When a DNS lookup is made, the DNS server returns a random query id between 1 and 65,000. What Dan found is that the query id&#8217;s that were being generated by a lot of the DNS servers were not all that random, allowing someone to potentially poison a DNS cache by anticipating the query id. You can read more about this issue <a href="http://securosis.com/2008/07/08/dan-kaminsky-discovers-fundamental-issue-in-dns-massive-multivendor-patch-released/">here</a>. The Ubuntu security report is <a href="http://www.ubuntu.com/usn/usn-622-1">here</a>. I would strongly recommend that you upgrade your DNS servers ASAP if you haven&#8217;t already.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.trinitynet.co.nz/2008/07/major-dns-vulnerability-discovered/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
