Date: Wed, 27 May 1998 08:56:13 -0500 From: kbrown@primelink.com To: freebsd-isp@FreeBSD.ORG Subject: strange named syslog entries Message-ID: <86256611.004C1906.00@domino.primelink.com>
next in thread | raw e-mail | index | archive | help
Time for another round of named syslog entries questions... After getting nailed by the latest round of exploit attempts of bind 4.9.3 I recently upgraded to 8.1.1 and have been watching it very closely. Over the past couple of days, I have found the following entries in my syslog which concern me: May 18 02:02:25 ns1 named[4752]: bad referral (29.206.in-addr.arpa !< 125.29.206.in-addr.arpa) May 18 02:02:25 ns1 named[4752]: bad referral (29.206.in-addr.arpa !< 125.29.206.in-addr.arpa) May 20 21:00:33 ns1 named[4752]: bad referral (com !< INFIND.com) May 21 15:13:24 ns1 named[4752]: bad referral (com !< INFIND.com) May 25 01:59:16 ns1 named[4752]: bad referral (83.72.170.38.in-addr.arpa !< *.170.38.in-addr.arpa) May 25 02:05:46 ns1 named[4752]: bad referral (2.181.165.38.in-addr.arpa !< *.165.38.in-addr.arpa) May 26 08:11:27 ns1 named[4752]: bad referral (ATT.net !< NS.ELS-GMS.ATT.NET) May 26 15:03:35 ns1 named[4752]: bad referral (com !< microsoft-online-sales.com) What is the cause of this? To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?86256611.004C1906.00>