[Full-disclosure] Named and the mysterious .so resolves

Hey all! Soo...I see these in my logs from time to time: Apr 10 14:46:37 mail named[739]: unexpected RCODE (REFUSED) resolving 'pam_mysql.so/NS/IN': 209.68.0.85#53 Can anyone shed any light on this? Thanks all! Below is a complete list of .so's attempted: '1.so/NS/IN': '18.so/NS/IN':

Re: [Full-disclosure] Named and the mysterious .so resolves

do you have forwarding enabled? what do your forwarders say when you try to resolve bla.bla.bla.bla.bla.bla? On 4/10/07, James Lay [EMAIL PROTECTED] wrote: Hey all! Soo...I see these in my logs from time to time: Apr 10 14:46:37 mail named[739]: unexpected RCODE (REFUSED) resolving

Re: [Full-disclosure] Named and the mysterious .so resolves

Is it possible that people are trying to search for these libraries but via the URL text box in their web browser, so it first attempts to find the DNS A record under Somalia's servers. When it can't find an entry, it decides oh, I guess we're using google for this? Don

Re: [Full-disclosure] Named and the mysterious .so resolves

On Tue, 10 Apr 2007, James Lay wrote: Soo...I see these in my logs from time to time: Apr 10 14:46:37 mail named[739]: unexpected RCODE (REFUSED) resolving 'pam_mysql.so/NS/IN': 209.68.0.85#53 Can anyone shed any light on this? Thanks all! Below is a complete list of .so's attempted: