version.bind

[keith at mail.telestream.com]

If I'm not mistaken that is a special thing. Like in nslookup doing this
to get a version

nslookup
> set class=chaos
> set type=txt
> version.bind
Server:  ns.somedomain.com
Address:  some.ip.here.com

VERSION.BIND    text = "8.2"
>

I would assume someone is trying to see what version you are running to
see if you are vulnerable to a particular exploit.

Keith



=================================
Keith W.

At the helm <for better or worse>
=================================


On Tue, 6 Jun 2000, Bill Moseley wrote:

> I keep getting refused queries (I only allow queries for my local zones)
> for "version.bind" from various different IP numbers.
> 
> named[121]: unapproved query from [211.53.209.124].4421 for "version.bind"
> named[28152]: unapproved query from [216.174.66.131].2855 for "version.bind"
> 
> Did some versions of bid return the version for this type of query?
> 
> Thanks,
> 
> BTW -- that second IP later tried this:
> popper[2168]: refused connect from 216.174.66.131
> 
> 
> 
> Bill Moseley
> mailto:moseley at hank.org
> 
>