Unapproved Updates?

Kevin Darcy kcd at daimlerchrysler.com
Wed Sep 27 01:09:38 UTC 2000


It's probably some stupid Win2K clients trying to register themselves with your
nameserver.

What is still a mystery to me is: how are my domain names getting into their
configurations? I'm even getting update attempts to the relatively-obscure
"fivestar.com", which is probably unknown to most of our *own* people, let
alone random external boxes. Yet none to our "flagship" domains like
4adodge.com, chryslercars.com, etc. I suspect it has something to do with
email, since the domains which are affected are all valid email destinations.

I've considered reporting these to the FBI as hacking attempts. Maybe that
would put enough pressure on to uncover the Win2K *BUG* which is most likely
causing these spurious update attempts. Then we all file a class action suit
against Microsoft for theft of resources (half a :-).


- Kevin

Geoff King wrote:

> I just started getting many of these in the messages log file;
>
> Sep 26 16:46:44 ns1 named[3112]: unapproved update from
> [212.100.204.150].3270 for ontherun.com
>
> Looking through the book it appears that someone is appempting Dynamic
> Updates to this domain.  I think I am on the right path here.  No one should
> be doing this, I haven't setup Dynamic DNS (yet, sounds fun and cool so will
> probably be playing with it soon).
>
> Any insight would be appreciated.
>
> Thanks
>
> Geoff






More information about the bind-users mailing list