[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Interresting report by logcheck....

On Fri, Feb 01, 2002 at 04:01:48PM -0500, Noah Meyerhans wrote:
> On Fri, Feb 01, 2002 at 02:10:07PM -0600, Adam Majer wrote:
> > 
> > What does this mean? I am running bind but it is behind firewall and
> > inaccesible from outside..
> > 
> logcheck is being stupid.  It sees the word "attack" in the message, and
> warns you about it.
> The message from bind is simply stating that robotattack.com is in
> violation of some RFC by having an NS record that points to a CNAME
> (where it's supposed to point to an A record).  It just means that their
> netadmins are ignorant.

I see. I always get these warnings from bind. But this one was "Active Attack"
so I thought I would ask why...


Reply to: