Odd entry in my log files
I've got check log running on my woody box. The box is running an internal
only DNS server behind a firewall that should be denying access to the
outside world. 'checklog' picked out a couple of 'unusual' entries which
I've not seen before in my logs:
Jun 19 11:56:13 thebox named[202]: invalid RR type 'A6' in additional
section (name = 'ns0.wossname.org.uk') from [213.212.70.59].53
Jun 19 11:56:13 thebox named[202]: invalid RR type 'A6' in additional
section (name = 'wossname.org.uk') from [213.212.70.59].53
Jun 19 11:56:13 thebox named[202]: invalid RR type 'A6' in additional
section (name = 'ns0.wossname.org.uk') from [213.212.70.59].53
Jun 19 11:56:13 thebox named[202]: invalid RR type 'A6' in additional
section (name = 'wossname.org.uk') from [213.212.70.59].53
Jun 19 11:56:13 thebox named[202]: invalid RR type 'A6' in additional
section (name = 'ns0.wossname.org.uk') from [213.212.70.59].53
Jun 19 11:56:13 thebox named[202]: invalid RR type 'A6' in additional
section (name = 'wossname.org.uk') from [213.212.70.59].53
Jun 19 11:56:13 thebox named[202]: invalid RR type 'A6' in additional
section (name = 'ns0.wossname.org.uk') from [213.212.70.59].53
Jun 19 11:56:13 thebox named[202]: invalid RR type 'A6' in additional
section (name = 'wossname.org.uk') from [213.212.70.59].53
I checked 213.212.70.59:
andrew@thebox:~$ host 213.212.70.59
Name: ns1.caladan.net.uk
Address: 213.212.70.59
caladan.net.uk appears to be a co-location outfit based in Manchester UK.
wossname.org.uk appears to be someone's hope pages. Until I saw these
entries I'd never heard of wossname.org.uk or caladan.net.uk.
What is happening here? And is it something I should be worried about?
There doesn't appear to be anything different about my bind config on
thebox. I've not seen anything else in the logs since seeing these
entries.
Cheers,
Andrew
"Whether you think you can,
Or whether you think you can't
You are right!"
--
To UNSUBSCRIBE, email to debian-user-request@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Reply to: