/etc/defaultrouter mysteriously deleted

From: r.polanskis@uws.edu.au
Date: Mon Aug 04 2003 - 23:47:17 EDT


Hi,
We have a very strange problem I am trying to get to the bottom of.

We had a problem yesterday, with a switch that caused an outage on a couple
of subnets. When the switch came back up, several hosts that rely
on the /etc/defaultrouter file to provide their routing info,
had the file deleted and we had to recreate it.

This created a denial of service for these hosts. Even my own
workstation was affected. Recreating the /etc/defaultrouter file
with the appropriate information on each host and then rebooting
fixed the problem.

Does anyone know of a similar problem having happened to them?

There are no indications in the logs of each host of having been exploited.
The problem appeared across a range of Sun boxes, with OS 2.5.1 through to
5.8 being affected.

Please tell!
rachel

-- 
Rachel Polanskis		Systems Admin, University of Western Sydney
V1-37, Kingswood Campus		(+61 2) 47 360 291 <r.polanskis@uws.edu.au>
        "They who would give up an essential liberty for temporary security,
        deserve neither liberty or security" - Benjamin Franklin, 1759
_______________________________________________
sunmanagers mailing list
sunmanagers@sunmanagers.org
http://www.sunmanagers.org/mailman/listinfo/sunmanagers


This archive was generated by hypermail 2.1.7 : Wed Apr 09 2008 - 23:26:51 EDT