Re: bind9 security problem?
Hello,
your named.conf add
logging {
category lame-servers {null; };
};
like is but.
regards..
,''`. Ozgur Karatas
: :' : ozgur@ozgurkaratas.com
`. `' http://www.ozgurkaratas.com
`- Powered By Debian GNU\Linux
---- Adrian von Bidder <avbidder@fortytwo.ch> demiş ki:
> Yodel!
>
> Is there a security problem in some bind version? Or in some syncml-related
> application? Or is somebody just being silly? I have these in my logs:
>
> ===
> Nov 3 15:35:03 myhost named[8286]: unexpected RCODE (SERVFAIL) resolving 'cscursor.so/NS/IN': myforwarderip1#53
> Nov 3 15:35:03 myhost named[8286]: unexpected RCODE (SERVFAIL) resolving 'pptpd-logwtmp.so/NS/IN': myforwarderip1#53
> Nov 3 15:35:03 myhost named[8286]: unexpected RCODE (SERVFAIL) resolving 'libsyncml_plugin.so/NS/IN': myforwarderip1#53
> Nov 3 15:35:03 myhost named[8286]: unexpected RCODE (SERVFAIL) resolving 'libgnutls.so/NS/IN': myforwarderip1#53
> Nov 3 15:35:05 myhost named[8286]: unexpected RCODE (SERVFAIL) resolving 'cscursor.so/NS/IN': myforwarderip2#53
> Nov 3 15:35:05 myhost named[8286]: unexpected RCODE (SERVFAIL) resolving 'pptpd-logwtmp.so/NS/IN': myforwarderip2#53
> Nov 3 15:35:05 myhost named[8286]: unexpected RCODE (SERVFAIL) resolving 'libsyncml_plugin.so/NS/IN': myforwarderip2#53
> Nov 3 15:35:05 myhost named[8286]: unexpected RCODE (SERVFAIL) resolving 'libgnutls.so/NS/IN': myforwarderip2#53
> Nov 3 15:35:08 myhost named[8286]: unexpected RCODE (REFUSED) resolving 'cscursor.so/NS/IN': someip#53
> Nov 3 15:35:08 myhost named[8286]: unexpected RCODE (REFUSED) resolving 'libsyncml_plugin.so/NS/IN': someip#53
> Nov 3 15:35:08 myhost named[8286]: unexpected RCODE (REFUSED) resolving 'pptpd-logwtmp.so/NS/IN': someip#53
> Nov 3 15:35:08 myhost named[8286]: unexpected RCODE (REFUSED) resolving 'libgnutls.so/NS/IN': someip#53
> Nov 3 15:35:08 myhost named[8286]: lame server resolving 'cscursor.so' (in 'so'?): someotherip#53
> Nov 3 15:35:08 myhost named[8286]: lame server resolving 'libsyncml_plugin.so'(in 'so'?): someotherip#53
> Nov 3 15:35:08 myhost named[8286]: lame server resolving 'pptpd-logwtmp.so' (in 'so'?): someotherip#53
> Nov 3 15:35:08 myhost named[8286]: lame server resolving 'libgnutls.so' (in 'so'?): someotherip#53
> ===
>
> Comments?
>
> -- vbi
>
> --
> OpenPGP encrypted mail welcome - my key: http://fortytwo.ch/gpg/92082481
Reply to: