(no subject)

Andreas Constantinides (MegaHz)

unread,

Dec 19, 2002, 7:07:26 AM12/19/02

to

Hello, I am having a problem,
I am gating this logs often, what is the problem ?

# tail -f inetdlog-04-12-02
Dec 4 14:40:13 ns0 named[419]: [ID 295310 daemon.notice] unapproved query from
[159.103.208.46].53 for "mail.myhost.com"
Dec 4 14:40:13 ns0 last message repeated 1 time
Dec 4 14:40:13 ns0 named[419]: [ID 295310 daemon.notice] unapproved query from
[159.103.208.46].53 for "smatp.myhost.com"
Dec 4 14:40:13 ns0 last message repeated 2 times
Dec 4 14:40:13 ns0 named[419]: [ID 295310 daemon.notice] unapproved query from
[159.103.208.46].53 for "ns0.myhost.com"
Dec 4 14:40:13 ns0 last message repeated 1 time
Dec 4 14:40:13 ns0 named[419]: [ID 295310 daemon.notice] unapproved query from
[159.103.208.46].53 for "mail.myhost.com"
Dec 4 14:40:14 ns0 named[419]: [ID 295310 daemon.notice] unapproved query from
[195.7.224.57].1079 for "other.myhost.com"
Dec 4 14:40:15 ns0 last message repeated 1 time
Dec 4 14:40:28 ns0 named[419]: [ID 295310 daemon.notice] unapproved query from
[193.45.244.135].1028 for "other1.myhost.com"

Please help me

Thank you

--
/*
* Andreas Constantinides (MegaHz)
* Owner of www.cyhackportal.com
* Personal website: www.megahz.org
*
*/

Mark_A...@isc.org

unread,

Dec 19, 2002, 7:46:22 AM12/19/02

to

You are running a version of named with known security flaws.
I suggest that you update. See the following for details
http://www.isc.org/products/BIND/bind-security.html

W2K/Macs are trying to register themselves in the DNS.
http://www.domainregistry.ie/frameset/dynamicdnspol.html

> Please help me
>
> Thank you
>
> --
> /*
> * Andreas Constantinides (MegaHz)
> * Owner of www.cyhackportal.com
> * Personal website: www.megahz.org
> *
> */
>
>
>
>
>

--
Mark Andrews, Internet Software Consortium
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742 INTERNET: Mark.A...@isc.org

Mats Dufberg

unread,

Dec 20, 2002, 1:15:22 AM12/20/02

to

On Dec 19, 2002, 14:12 (+0200) Andreas Constantinides (MegaHz)...:

> Hello, I am having a problem,
> I am gating this logs often, what is the problem ?

What do you expect your nameserver to do when getting a request from
159.103.208.46 on mail.myhost.com?

> # tail -f inetdlog-04-12-02
> Dec 4 14:40:13 ns0 named[419]: [ID 295310 daemon.notice] unapproved query from
> [159.103.208.46].53 for "mail.myhost.com"
> Dec 4 14:40:13 ns0 last message repeated 1 time
> Dec 4 14:40:13 ns0 named[419]: [ID 295310 daemon.notice] unapproved query from
> [159.103.208.46].53 for "smatp.myhost.com"
> Dec 4 14:40:13 ns0 last message repeated 2 times
> Dec 4 14:40:13 ns0 named[419]: [ID 295310 daemon.notice] unapproved query from
> [159.103.208.46].53 for "ns0.myhost.com"
> Dec 4 14:40:13 ns0 last message repeated 1 time
> Dec 4 14:40:13 ns0 named[419]: [ID 295310 daemon.notice] unapproved query from
> [159.103.208.46].53 for "mail.myhost.com"
> Dec 4 14:40:14 ns0 named[419]: [ID 295310 daemon.notice] unapproved query from
> [195.7.224.57].1079 for "other.myhost.com"
> Dec 4 14:40:15 ns0 last message repeated 1 time

> Dec 4 14:40:28 ns0 named[419]: [ID 295310 daemon.notice] unapproved query from
> [193.45.244.135].1028 for "other1.myhost.com"

Mats

----------------------------------------------------------------------
Mats Dufberg Registry TeliaNet
duf...@telia.net Skanova/Nwi
+46 8 713 54 38 Maorbackagatan 11, hus L
+46 70 258 2588 SE-123 86 Farsta
----------------------------------------------------------------------