On Tue, 14 Jan 2003, at 18:10 [=GMT-0600], Dan Nelson wrote:
> In the last episode (Jan 14), Stacey Roberts said:

> > > >  named[143]: denied update from [host_IP].1268 for "1.168.192.in-addr.arpa" IN
> > >
> > > Is that host running Windows 2000 or XP?  Does it also have
> > > "Register this connection's addresses in DNS" checked in (deep
> >
> > Yes, its a Win2K Pro machine.

> You'll get the messages on whatever machine is the primary DNS for your
> domain.  The checkbox tells W2K to directly update the DNS record for
> its IP (usually handed to it by the DHCP server).  I prefer the Netware
> way, where the DHCP server notifies the DNS server itself, instead of
> hoping the client does it right.
>
> You can safely ignore the message if you want.

And what about similar messages, where the update is tried, not on
private IP reverse DNS, but on . (the root zone), or some fancy domain
I happen(ed) to have running on the server (I remember eightball.net
and kickingback.com)? And what if it comes from machines 15 hops away?

Examples:

Nov 12 12:02:27 [hostname] named[82]: denied update from
[12.234.42.233].32776 for "." IN
Nov 12 12:18:56 [hostname] named[82]: denied update from
[12.234.42.233].32776 for "." IN
Nov 12 12:02:27 [hostname] named[82]: denied update from
[12.234.42.233].32776 for "." IN
Nov 12 12:18:56 [hostname] named[82]: denied update from
[12.234.42.233].32776 for "." IN

Jan 14 11:23:08 [hostname] named[22121]: client 64.30.161.135#32777:
update forwarding denied
Jan 14 14:02:15 [hostname] named[22121]: client 194.237.39.97#35558:
update forwarding denied
Jan 14 14:20:57 [hostname] named[22121]: client 194.237.39.97#35559:
update forwarding denied
Jan 14 14:23:10 [hostname] named[22121]: client 64.30.161.135#32777:
update forwarding denied

I changed to Bind 9 somewhere in Autumn, which may explain why I don't
get the exact domains anymore in the console messages. I haven't
researched that. I am guessing.

I do not run reverse DNS for private address space on the box, so the
update of these addresses cannot be what it is about, or can it?

-- 
[04] We value you like our close relations.
http://logoff.org/


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-questions" in the body of the message

Reply via email to