Re: Interresting report by logcheck....
On Fri, Feb 01, 2002 at 04:01:48PM -0500, Noah Meyerhans wrote:
> On Fri, Feb 01, 2002 at 02:10:07PM -0600, Adam Majer wrote:
> > What does this mean? I am running bind but it is behind firewall and
> > inaccesible from outside..
> logcheck is being stupid. It sees the word "attack" in the message, and
> warns you about it.
> The message from bind is simply stating that robotattack.com is in
> violation of some RFC by having an NS record that points to a CNAME
> (where it's supposed to point to an A record). It just means that their
> netadmins are ignorant.
I see. I always get these warnings from bind. But this one was "Active Attack"
so I thought I would ask why...