Very Computer

for those going or gone to AIX 4.3.3
beware of IY05739, arp table full
we took our AIX DNS servers up to AIX 4.3.3, still waiting
the NAMED fix for CERT CA-99-14
as the arp table won't add new entries after being full
as entries expire or are removed, nodes that wouldn't work
start to work, nodes that would, now won't.
apr tables fill quickly on a good size network of unix and
PCs using these AIX machines for DNS.
---------------------------
John Jenkinson
BP Exploration (Alaska)

Sent via Deja.com http://www.deja.com/
Before you buy.

As a workaround, have you tried increasing your ARP table size?

-Dave

I'm a bit confused here.  Have you installed the fix for IY05739,
bos.net.tcp.client 4.3.3.3, or not?  IBM does supply a fix for the
problem you describe.

IBM's support for AIX 4.3.3 has been less than stellar, though, I
must admit.  Many parts of it were broken out of the box.  Already the
bos.net.nfs.client fileset is up to 4.3.3.10, with the closure of APAR
IY06112, "CAN HANG OR CRASH WHEN UNMOUNTING AN NFS FILESYSTEM".

We are about to investigate installing BIND 8.2.2-P5 on our AIX boxes
and bypassing IBM's broken implementations.  Waiting months for fixes
that are available from ISC if one gets the original source is just silly.

--
Shane Castle             | "Perfection, then, is finally achieved, not
Boulder County Info Svcs | when there is nothing left to add, but when
Boulder CO USA           | there is nothing left to take away."
                         |                - Antoine de Saint-Exupry

Oh, for the love of -- This was broke in 4.3.2, back in August of last
year -- and fixed IIRC early September (or late August). Are you saying
they didn't carry the fix forward to 4.3.3?? (More accurately - the same
dumb mistake went to 4.3.3 without the corrections.)

I've about had it with closed-source OSes.

TomK

namffuak -AT- skyenet PunctuatioN net

Quote:>We are about to investigate installing BIND 8.2.2-P5 on our AIX boxes
>and bypassing IBM's broken implementations.  Waiting months for fixes
>that are available from ISC if one gets the original source is just silly.