CHAOS version.bind

[Mr. James W. Laferriere]

	Hello Vik ,  It is someone (probably) trying to acquire the
	version number of your named daemon .  It may well be reason
	for alarm .  As depending on the version there are exploits
	that can be used to gain access to the system .  Hth ,  JimL
ps:	Disabling or changing the response isn't a cure .  All that is
	needed is to begin the various attack methods & see if any get
	thru .

On Sat, 27 Jan 2001, Vik Heyndrickx wrote:
> Hi,
> In my newly set-up DNS server which is the SOA for some public IN domains, I
> found the following line in the logging of bind (named):
> XX+/212.68.193.196/version.bind/TXT/CHAOS
> Has someone any idea why this query was sent to my DNS server? Should I be
> worried about it?
> --
> Vik
       +----------------------------------------------------------------+
       | James   W.   Laferriere | System  Techniques | Give me VMS     |
       | Network        Engineer | 25416      22nd So |  Give me Linux  |
       | babydr at baby-dragons.com | DesMoines WA 98198 |   only  on  AXP |
       +----------------------------------------------------------------+