From owner-freebsd-security Sat Jul 11 10:13:36 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id KAA20364 for freebsd-security-outgoing; Sat, 11 Jul 1998 10:13:36 -0700 (PDT) (envelope-from owner-freebsd-security@FreeBSD.ORG) Received: from frmug.org (frmug-gw.frmug.org [193.56.58.252]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id KAA20359 for ; Sat, 11 Jul 1998 10:13:33 -0700 (PDT) (envelope-from roberto@keltia.freenix.fr) Received: (from uucp@localhost) by frmug.org (8.9.0/frmug-2.3/nospam) with UUCP id TAA10970 for freebsd-security@FreeBSD.ORG; Sat, 11 Jul 1998 19:13:28 +0200 (CEST) (envelope-from roberto@keltia.freenix.fr) Received: (from roberto@localhost) by keltia.freenix.fr (8.9.0.Beta4/keltia-2.14/nospam) id KAA09565 for freebsd-security@FreeBSD.ORG; Sat, 11 Jul 1998 10:16:24 +0200 (CEST) (envelope-from roberto) Message-ID: <19980711101624.A9562@keltia.freenix.fr> Date: Sat, 11 Jul 1998 10:16:24 +0200 From: Ollivier Robert To: "freebsd-security@FreeBSD.ORG" Subject: Re: DNS zone xfers from random(?) sites Mail-Followup-To: "freebsd-security@FreeBSD.ORG" References: <199807101158.VAA15030@mail.aussie.org> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 0.92.14i In-Reply-To: <199807101158.VAA15030@mail.aussie.org>; from Hallam Oaks P/L list account on Fri, Jul 10, 1998 at 09:59:07PM +1000 X-Operating-System: FreeBSD 3.0-CURRENT ctm#4419 AMD-K6 MMX @ 225 MHz Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org According to Hallam Oaks P/L list account: > Basically, what seems to be random sites around the world (e.g. Israel, > Singapore, France) are downloading the zone file, even where they are not > secondaries to this domain. I am not seeing this pattern on other domains Did you asked them why they were doing this ? -- Ollivier ROBERT -=- FreeBSD: The Power to Serve! -=- roberto@keltia.freenix.fr FreeBSD keltia.freenix.fr 3.0-CURRENT #11: Sat Jun 27 00:41:06 CEST 1998 To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe security" in the body of the message