Lots of Unapproved AXFR's in the logs lately...anyone else?

Nate Duehr nate at natetech.com
Tue Aug 29 06:51:43 UTC 2000


On Thu, Aug 24, 2000 at 01:40:03AM +0200, Markus Stumpf wrote:
> I'am seeing about 1-4 of those attacks every day for more than one
> year now (we're hosting about 12000 .de domains) and each attack
> usually consists of up to 500 AXFR requests, sometimes more.

What tool are you monitoring your number of AXFR requests with?
Anything other than BIND's logging itself?  Just curious.

-- 
Nate Duehr <nate at natetech.com>

GPG Key fingerprint = DCAF 2B9D CC9B 96FA 7A6D AAF4 2D61 77C5 7ECE C1D2
Public Key available upon request, or at wwwkeys.pgp.net and others.

-- Attached file included as plaintext by Listar --

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.1 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE5q11/LWF3xX7OwdIRAgHMAJ4zrd/WMQUDAPs0zFatq2rQ2Hg/SgCfdGFC
PgtLYtFImG1vWC3JxwM7+zQ=
=J2qe
-----END PGP SIGNATURE-----




More information about the bind-users mailing list