Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 10 Jul 1998 21:59:07 +1000
From:      "Hallam Oaks P/L list account" <maillist@oaks.com.au>
To:        "freebsd-security@FreeBSD.ORG" <freebsd-security@FreeBSD.ORG>
Subject:   DNS zone xfers from random(?) sites
Message-ID:  <199807101158.VAA15030@mail.aussie.org>

next in thread | raw e-mail | index | archive | help
G'Day all;

I hope that asking this question doesn't reveal too much of my ignorance 
of DNS-related issues ;)

I've been primary DNS for a few domains for about two or three years now. 
Right now my machine hosts about six primary DNS entries. Each of the 
primaries is backed by two secondaries. So far so good.

Recently (a few months ago) I added a new domain - mgr.org.au - and have 
since started noticing a pattern of zone transfers that I do not 
explicitly recall seeing before on any of my other domains.

Basically, what seems to be random sites around the world (e.g. Israel, 
Singapore, France) are downloading the zone file, even where they are not 
secondaries to this domain. I am not seeing this pattern on other domains 
(one or two of them perhaps, but not so many in such a short time). I do 
not recognise the sites that are requesting the transfers.

While I could of course block them from doing this I am curious as to 
whether or not anyone can offer up any suggestion as to _why_ this may be 
happening, and if there is any legitimate explanation for it. The domain 
in question is for a local (Melbourne, Australia) FM radio station (which 
is not even broadcasting at the moment) and I can hardly see it having any 
interest to people in, say, France or Singapore.

If there's a legitimate purpose for it I'll just let it continue. I know 
it's possible to do manual zone transfers (heck, I've done it myself) but 
I can't figure out why so many different sites ...

Any info appreciated.

regards,

-- Chris
   Hallam Oaks P/L




To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe security" in the body of the message



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199807101158.VAA15030>