Interresting report by logcheck....

[Adam Majer <adamm@galacticasoftware.com>]

Hi all,

I just got this from logcheck:

is mail is sent by logcheck. If you do not want to receive it any more,
please modify the configuration files in /etc/logcheck or deinstall logcheck.

Active System Attack Alerts 
=-=-=-=-=-=-=-=-=-=-=-=-=-=
Feb  1 13:02:28 polaris named[201]: "robotattack.com IN NS" points to a CNAME (cluster.robotattack.com)
Feb  1 13:02:28 polaris named[201]: "robotattack.com IN NS" points to a CNAME (cluster.robotattack.com)

Possible Security Violations
=-=-=-=-=-=-=-=-=-=
Feb  1 13:02:28 polaris named[201]: "robotattack.com IN NS" points to a CNAME (cluster.robotattack.com)
Feb  1 13:02:28 polaris named[201]: "robotattack.com IN NS" points to a CNAME (cluster.robotattack.com)



What does this mean? I am running bind but it is behind firewall and inaccesible from outside..

Thanks,
Adam