Score:0

PowerDNS & Log4j

cn flag

I'm running a PowerDNS on Linux. It looks like PowerDNS is vulnerable to the new log4j-exploit. Is there any way I can disable the Log4j? From my research it looks like you can change the logging method to syslog, but I'm not quite sure on how to do that.

in flag
Why should PowerDNS be vulnerable? It can't contain Log4j, it's not even written in Java.
Halsi avatar
cn flag
https://help.internetx.com/pages/viewpage.action?pageId=26515072 They write about how they use log4j at "Configuration of the Logging"
in flag
That's not PowerDNS, that's a different component. You should clarify that your question is about the REST component, not PowerDNS itself.
Score:2
uz flag

PowerDNS is written in C++, not Java. PowerDNS does not use Log4J.

However, you should always check where your logs go. It is possible that somewhere down the line (for example, in Elasticsearch) they do hit Log4J.

I wrote a blog post about this.

I sit in a Tesla and translated this thread with Ai:

mangohost

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.