From owner-freebsd-questions Tue Jan 14 15:50:28 2003 Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 76ADD37B401 for ; Tue, 14 Jan 2003 15:50:27 -0800 (PST) Received: from smtp.infracaninophile.co.uk (happy-idiot-talk.infracaninophile.co.uk [81.2.69.218]) by mx1.FreeBSD.org (Postfix) with ESMTP id 5996F43F43 for ; Tue, 14 Jan 2003 15:50:26 -0800 (PST) (envelope-from m.seaman@infracaninophile.co.uk) Received: from happy-idiot-talk.infracaninophile.co.uk (localhost.infracaninophile.co.uk [IPv6:::1]) by smtp.infracaninophile.co.uk (8.12.6/8.12.6) with ESMTP id h0ENoK1n023318 for ; Tue, 14 Jan 2003 23:50:20 GMT (envelope-from matthew@happy-idiot-talk.infracaninophile.co.uk) Received: (from matthew@localhost) by happy-idiot-talk.infracaninophile.co.uk (8.12.6/8.12.6/Submit) id h0ENoFuh023317 for freebsd-questions@FreeBSD.ORG; Tue, 14 Jan 2003 23:50:15 GMT Date: Tue, 14 Jan 2003 23:50:15 +0000 From: Matthew Seaman To: FreeBSD Questions Subject: Re: named messages in /var/log/messages Message-ID: <20030114235015.GB22937@happy-idiot-talk.infracaninophi> Mail-Followup-To: Matthew Seaman , FreeBSD Questions References: <1042586630.51041.360.camel@localhost> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <1042586630.51041.360.camel@localhost> User-Agent: Mutt/1.5.3i X-Spam-Status: No, hits=-3.3 required=5.0 tests=IN_REP_TO,QUOTED_EMAIL_TEXT,REFERENCES,SPAM_PHRASE_01_02, USER_AGENT,USER_AGENT_MUTT version=2.43 Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG On Tue, Jan 14, 2003 at 11:23:51PM +0000, Stacey Roberts wrote: > Hello, > I'm running bind in a sandbox as per the handbook. I've had this > set up and (presumably) working okay since FreeBSD 4.6 Stable, and have > today noticed these named entries in /var/log/messages: > > named[143]: denied update from [host_IP].1268 for > "1.168.192.in-addr.arpa" IN Are you running a DHCP server? On Windows 2K? This is a host trying to insert a dynamic PTR record into your DNS. That is usually a function of a DHCP server, and can be configured if desired. If you haven't configured dynamic DNS, then it's harmless apart from taking up space in your log files. W2K is notable for shipping with the dynamic DNS stuff turned on. It's not just you: seems a lot of W2K machines try to update records in the root servers too... Search for 'Syslog Errors' in http://www.caida.org/outreach/presentations/ietf0112/dns.damage.html for the depressing statistics. Cheers, Matthew -- Dr Matthew J Seaman MA, D.Phil. 26 The Paddocks Savill Way PGP: http://www.infracaninophile.co.uk/pgpkey Marlow Tel: +44 1628 476614 Bucks., SL7 1TH UK To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message