Skip site navigation (1)Skip section navigation (2)
Date:      16 Jun 1999 12:59:38 +0200
From:      Dag-Erling Smorgrav <des@flood.ping.uio.no>
To:        junkmale@xtra.co.nz
Cc:        Dag-Erling Smorgrav <des@flood.ping.uio.no>, security@FreeBSD.ORG, Mike Nowlin <mike@argos.org>
Subject:   Re: named timeouts
Message-ID:  <xzpzp20csx1.fsf@flood.ping.uio.no>
In-Reply-To: "Dan Langille"'s message of "Wed, 16 Jun 1999 22:00:18 %2B1200"
References:  "Dan Langille"'s message of "Wed, 16 Jun 1999 07:45:31 %2B1200" <19990616100254.GZCQ311284.mta2-rme@wocker>

next in thread | previous in thread | raw e-mail | index | archive | help
"Dan Langille" <junkmale@xtra.co.nz> writes:
> There messages aren't from ipfilter.  I believe they are from my 
> kernel.log.  I apologise for not pointing that out in the first place:
> 
> $ tail kernel.log 
> Jun 16 09:16:42 ns /kernel: Connection attempt to UDP 127.0.0.1:1391 from 127.0.0.1:53
> Jun 16 09:17:02 ns /kernel: Connection attempt to UDP 127.0.0.1:1393 from 127.0.0.1:53

Ah, these are log_in_vain messages. What they mean is that named isn't
listening on 127.0.0.1. You need to add localhost or localnets to the
allow-query clause in named.conf (either in the options section or in
each zone).

DES
-- 
Dag-Erling Smorgrav - des@flood.ping.uio.no


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?xzpzp20csx1.fsf>