Security Incidents mailing list archives

8.2.2-P5 stops answering queries?


From: dramirez () CEMTEC COM (Daniel Ramirez)
Date: Thu, 22 Jun 2000 14:24:00 -0000


Fromyesterday logs:

Jun 21 21:15:20 proxy named[170]: unapproved query from 
[167.8.29.52].33479 for "VERSION.BIND"
Jun 21 21:15:20 proxy last message repeated 2 times
Jun 21 23:05:20 proxy named[170]: unapproved query from 
[167.8.29.52].35697 for "VERSION.BIND"
Jun 21 23:05:20 proxy last message repeated 2 times
Jun 21 23:12:57 proxy named[170]: unapproved query from 
[167.8.29.52].35827 for "VERSION.BIND"

This morning two 8.2.2-P5 couldn't resolve anything (nothing 
else in the logs), both are caching only servers, on Solaris 
7, and RedHat 5.1.

Does anyone have seen this behaviour before?

167.8.29.52 seems to be running ssh, bind 8.2.2-P5, http & 
https, I contacted the technical contact for Gannett.com 
(a newspaper?), but haven't received any response.

Thanks in advance for any pointers.

Daniel Ramirez <dramirez () cemtec com>


Current thread: