Rejected queries for mx???.emailfiltering.com

Phil Mayers p.mayers at imperial.ac.uk
Wed Jan 19 11:44:04 UTC 2011


On the subject of rejected queries - although this isn't a bind question 
per-se, I'm curious if anyone else here sees a lot of these:

client 178.123.92.141#23861: view main: query (cache) 
'mx242.emailfiltering.com/A/IN' denied

We get *loads* of them to our authoritative resolvers. I am assuming 
they are attempts at cache poisoning given the (ahem) dubious 
geographical origin of the queries (no offense intended to anyone living 
in those parts of the world) but I can't see any corresponding inbound 
forged DNS packets in our netflow.

Just curious.



More information about the bind-users mailing list