Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 21 Jan 2003 23:29:49 +0100
From:      Mark <admin@asarian-host.net>
To:        <freebsd-questions@freebsd.org>
Subject:   Some sort of attack?
Message-ID:  <200301212229.H0LMTSL09353@asarian-host.net>

next in thread | raw e-mail | index | archive | help
Hi,

Perusing my logs, my query-log (BIND 8.3.4, FreeBSD 4.7R) is suddenly filled
with odd queries for "extra". Like so:

.... XX /207.217.120.20/extra.asarian-host.net/MX/IN

No "extra" exists, btw. It seems some for of attack. Many of these queries
also come from legitimate name servers, so I cannot just block them all.

Has anyone ever seen this before? Do I need to be worried? And what can I
do?

Thanks!

- Mark


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200301212229.H0LMTSL09353>