Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 17 Apr 2017 14:19:24 -0400
From:      George Mitchell <george+freebsd@m5p.com>
To:        freebsd-hackers@FreeBSD.org
Subject:   Is this a cache poisoning attack?
Message-ID:  <15f762bd-383b-3545-c300-2b0bc92f2cfd@m5p.com>

next in thread | raw e-mail | index | archive | help
This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--TweOOwuQeS0B9QxHwktndtlPErK1k8CXj
Content-Type: multipart/mixed; boundary="WMr1OesIgIiA0vENK5cAcR3fauXi39kiK";
 protected-headers="v1"
From: George Mitchell <george+freebsd@m5p.com>
To: freebsd-hackers@FreeBSD.org
Message-ID: <15f762bd-383b-3545-c300-2b0bc92f2cfd@m5p.com>
Subject: Is this a cache poisoning attack?

--WMr1OesIgIiA0vENK5cAcR3fauXi39kiK
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable

I'm getting a plethora of errors like this in my system log, as my
sendmail is attempting to validate the domain names of incoming
envelope senders of spammers (identifying info deleted):

DNS format error from xxx#53 resolving xxx/MX for client xxx:xxx: Name .
(SOA) not subdomain of zone xxx -- invalid response

FreeBSD 10.3-RELEASE-p18, BIND 9.11.0-P5.  Name service seems to be
working normally otherwise.  Is this a symptom of an attempted cache
poisoning attack?                                          -- George


--WMr1OesIgIiA0vENK5cAcR3fauXi39kiK--

--TweOOwuQeS0B9QxHwktndtlPErK1k8CXj
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=zztv
-----END PGP SIGNATURE-----

--TweOOwuQeS0B9QxHwktndtlPErK1k8CXj--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?15f762bd-383b-3545-c300-2b0bc92f2cfd>