Date: Thu, 22 Nov 2001 13:23:33 +0000 From: Ceri <ceri@techsupport.co.uk> To: Walter Whitesell II <walter@globalsurf.net> Cc: freebsd-questions@freebsd.org, Jonathan Chen <jonathan.chen@itouch.co.nz> Subject: Re: log entrys Message-ID: <20011122132333.A14715@cartman.private.techsupport.co.uk> In-Reply-To: <20011122131021.A91710@jonc.itouch>; from jonathan.chen@itouch.co.nz on Thu, Nov 22, 2001 at 01:10:21PM %2B1300 References: <002a01c172e1$6b8b8bc0$0500a8c0@BIGMOUSE3> <20011122131021.A91710@jonc.itouch>
next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, Nov 22, 2001 at 01:10:21PM +1300, Jonathan Chen said: > On Wed, Nov 21, 2001 at 05:08:22PM -0600, Walter Whitesell II wrote: > > We have these log entrys in our messages logfile do you know what it might mean? > > > > Nov 21 04:55:56 ns1 named[82]: unapproved update from [65.202.13.36].1194 for microlab.com > > Nov 21 04:57:34 ns1 named[82]: unapproved update from [65.202.13.36].1220 for microlab.com > > Very likely, some Windows host is querying your DNS for all hosts in > its domain. No, that's not it. A Windows 2000 (possibly XP) machine on 65.202.13.36 has microlab.com entered as it's domain name, and nobody has unticked the box that says ``register this connection's address in DNS'', which is ticked by default, much to my chagrin : [root@ns1 /]$ grep -c update /data/namedb/logs/security.log 373690 Untick that box on that host and reboot it (even though windows doesn't say you need to, you do). Ceri -- I can please only one person per day. Today is not your day. Tomorrow isn't looking good either. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20011122132333.A14715>