lists at winnie.tiggee.com
Wed Jan 8 23:49:27 UTC 2003
Well I do agree that it is malicious. They are probably just Windows
machines trying to update your machine.
But I do agree that running a windows machine for a server of any kind
is malicious. :)
On Wed, 8 Jan 2003, Ragnar Paulson wrote:
> Thanks. That's what I suspected, it was just incredulous that there =
> are servers out there blatantly trying to change (hijack?) my zone =
> records. At least half a dozen different servers all over the world are =
> doing this, and all on the same zone even though this server is Master =
> for several others.
> ----- Original Message -----=20
> From: "Cricket Liu" <cricket at menandmice.com>
> To: <bind-users at isc.org>
> Sent: Wednesday, January 08, 2003 4:42 PM
> Subject: Re: update denied
> > Ragnar Paulson wrote:
> > > I've just today updated our primary nameserver to Bind 9.2.1 after
> > > running the secondary nameserver as 9.2.1 for a month. The primary
> > > name server is now regularly logging errors such as:
> > >=20
> > > Jan 8 16:02:32 ns2 named: error: client 188.8.131.52#28435:
> > > update 'group.com/IN' denied
> > >=20
> > > On the surface this looks like a good thing. I don't want random
> > > hosts in the Internet "updating" my zone. But what exactly does it
> > > mean and have I misconfigured something?
> > It means that your name server received a dynamic update message
> > from the address 184.108.40.206 and didn't process it, because its
> > configuration didn't say that updates from that address were allowed.
> > cricket
> > Men & Mice
> > DNS Software, Training and Consulting
> > www.menandmice.com
> > The DNS and BIND Cookbook, now available!
> > http://www.oreilly.com/catalog/dnsbindckbk/
More information about the bind-users