From owner-freebsd-isp Thu Feb 22 9:29:44 2001 Delivered-To: freebsd-isp@freebsd.org Received: from sixpence.mtcibs.com (sixpence.solveinteractive.com [204.62.227.50]) by hub.freebsd.org (Postfix) with ESMTP id 97D6F37B503 for ; Thu, 22 Feb 2001 09:29:40 -0800 (PST) (envelope-from rch@solveinteractive.com) Received: from gold.mtcibs.com (gold [204.62.225.30]) by sixpence.mtcibs.com (8.9.3/8.9.3) with ESMTP id MAA11744 for ; Thu, 22 Feb 2001 12:29:38 -0500 (EST) Received: from trinity.solveinteractive.com (trinity.solveinteractive.com [204.62.225.170]) by gold.mtcibs.com (8.8.7/8.7.3) with ESMTP id MAA00913 for ; Thu, 22 Feb 2001 12:29:38 -0500 (EST) Received: (from rch@localhost) by trinity.solveinteractive.com (8.11.1/8.11.1) id f1MHTli46684 for freebsd-isp@FreeBSD.ORG; Thu, 22 Feb 2001 12:29:47 -0500 (EST) (envelope-from rch@solveinteractive.com) Date: Thu, 22 Feb 2001 12:29:42 -0500 From: Robert Hough To: freebsd-isp@FreeBSD.ORG Subject: Re: annoying denied dns updates from lame nt/2000 servers Message-ID: <20010222122942.A46614@solveinteractive.com> Mail-Followup-To: freebsd-isp@FreeBSD.ORG References: <3A909F0D.549C38D1@confusion.net> <5.0.2.1.2.20010222115101.00aa29a0@mailhost.lightning.net> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: <5.0.2.1.2.20010222115101.00aa29a0@mailhost.lightning.net>; from jreddy@lightning.net on Thu, Feb 22, 2001 at 12:05:18 -0500 Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On Thu, Feb 22, 2001, John Reddy wrote: > > What about a scenario of a user base of tens of thousands, via DSL, cable > modem, dialup, etc. Getting hundreds or thousands of customers with Win2k > running, and running dynamic update. Just curious, but couldn't you just use ip filters to block this stuff in the first place? Dirty fix for this problem is just remove the log messages from the source. In the ns_update.c, you'll find something like this: ns_notice(ns_log_security, "denied update from %s for \"%s\"", like I said, not exactly a graceful way of doing things, but hey - if it bugs/worries you that much... :) -- Robert Hough (rch@solveinteractive.com) To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message