> Hi guys, > > i've looked at my dns logs and here's the output. Is this a security issue? > > Sep 29 14:49:25 dns1 named[79209]: unapproved query from > [203.131.131.35].1080 for "www.microsoft.com <http://www.microsoft.com>" > Sep 29 14:49:25 dns1 named[79209]: unapproved query from > [202.147.29.196].53173 for "164.151.161.68.in-addr.arpa" > Sep 29 14:49:25 dns1 named[79209]: unapproved query from > [202.147.29.196].53173 for "164.151.161.68.in-addr.arpa" > Sep 29 14:49:26 dns1 named[79209]: unapproved query from > [203.131.131.35].1493 for "pwn.nauf.info" > Sep 29 14:49:28 dns1 named[79209]: unapproved query from > [203.131.131.35].1522 for "ern.nnctx.com.ru" > Sep 29 14:49:29 dns1 named[79209]: unapproved query from > [203.131.131.35].1527 for "0.0.29.13" > Sep 29 14:49:30 dns1 named[79209]: unapproved query from > [203.131.131.35].1080 for "www.microsoft.com <http://www.microsoft.com>" > Sep 29 14:49:31 dns1 named[79209]: unapproved query from > [203.131.131.35].1542 for "pwn.nauf.info" > Sep 29 14:49:32 dns1 named[79209]: unapproved query from > [203.131.131.35].1027 for "360.yahoo.com" > Sep 29 14:49:32 dns1 named[79209]: unapproved query from > [203.131.131.35].1409 for "360.yahoo.com" > Sep 29 14:49:33 dns1 named[79209]: unapproved query from > [203.131.131.35].1054 for "download.microsoft.com" > Sep 29 14:49:33 dns1 named[79209]: unapproved query from > [203.131.131.35].1054 for "main.dl.ms.akadns.net" > Sep 29 14:49:33 dns1 named[79209]: unapproved query from > [203.131.131.35].1054 for "www.microsoft.com <http://www.microsoft.com>" > Sep 29 14:49:34 dns1 named[79209]: unapproved query from > [203.131.131.35].1054 for "toggle.www.ms.akadns.net" > Sep 29 14:49:34 dns1 named[79209]: unapproved query from > [203.131.131.35].1315 for "us.i1.yimg.com" > Sep 29 14:49:34 dns1 named[79209]: unapproved query from > [203.131.131.35].1409 for "us.i1.yimg.com" > Sep 29 14:49:35 dns1 named[79209]: unapproved query from > [203.131.131.35].1080 for "www.microsoft.com <http://www.microsoft.com>" > Sep 29 14:49:36 dns1 named[79209]: unapproved query from > [203.131.131.35].1054 for "g.msn.com" > Sep 29 14:49:36 dns1 named[79209]: unapproved query from > [203.131.131.35].1586 for "nnpy.nnctx.com.ru" > Sep 29 14:49:36 dns1 named[79209]: unapproved query from > [203.131.131.35].1054 for "g.msn.com" >
Not to worry, no need to post your configs. Obviously your named is not configured to answer queries from 203.131.131.35 (Zamboanga Colleges?). Better check if they really are restricted but then you should already had a call from them :-) --ed
_________________________________________________ Philippine Linux Users' Group (PLUG) Mailing List [email protected] (#PLUG @ irc.free.net.ph) Read the Guidelines: http://linux.org.ph/lists Searchable Archives: http://archives.free.net.ph
