Hi,
since months my named logs are full with lines like the following:
-- snip --
Jul 31 16:30:08 x named[6262]: client 192.117.155.16#2365: update
'imd.net/IN' denied
Jul 31 16:30:50 x named[6262]: client 192.117.155.16#2390: update
'imd.net/IN' denied
Jul 31 16:30:52 x named[6262]: client 192.117.155.16#2396: update
'imd.net/IN' denied
Jul 31 16:32:19 x named[6262]: client 192.117.155.16#2429: update
'imd.net/IN' denied
Jul 31 16:34:25 x named[6262]: client 192.117.155.16#2475: update
'imd.net/IN' denied
Jul 31 16:35:26 x named[6262]: client 192.117.155.16#2500: update
'imd.net/IN' denied
Jul 31 16:36:19 x named[6262]: client 192.117.155.16#2523: update
'imd.net/IN' denied
Jul 31 16:36:50 x named[6262]: client 192.117.155.16#2538: update
'imd.net/IN' denied
Jul 31 16:37:41 x named[6262]: client 192.117.155.16#2559: update
'imd.net/IN' denied
Jul 31 16:39:35 x named[6262]: client 192.117.155.16#2604: update
'imd.net/IN' denied
Jul 31 16:39:40 x named[6262]: client 192.117.155.16#2612: update
'imd.net/IN' denied
Jul 31 16:43:36 x named[6262]: client 192.117.155.16#2696: update
'imd.net/IN' denied
Jul 31 16:43:42 x named[6262]: client 192.117.155.16#2704: update
'imd.net/IN' denied
Jul 31 16:47:27 x named[6262]: client 192.117.155.16#2778: update
'imd.net/IN' denied
Jul 31 16:47:29 x named[6262]: client 192.117.155.16#2785: update
'imd.net/IN' denied
Jul 31 16:52:26 x named[6262]: client 192.117.155.16#2891: update
'imd.net/IN' denied
Jul
-- snap --
As it turns out, this happens if a WIN2000 user has configured it's machine
with a domain-name of "MyDomain.dom" for whatever reason and MyDomain.dom is
a domain my nameserver is the authority for. If that user has set it's
machine to do DHCP, that stupid windows2000 is trying to update my ZONE!
Ouch!
This usually happens every couple of minutes and is pretty annoying.
Has any one of you ever experienced similar behaviour?
Do you know of ways how to best deal with such a situation?
I am tired of having to add the offenders IP to my firewall to block em
there. I am also tired of contacting their ISPs in order to have them notify
their customer. I guess I can't sue Microsoft either ;-)
Any tips greatly appreciated (preferably cced direct as I'm on digest)
ADV<Thanks>ANCE,
Stefan
--
<http://www.StefanSeiz.com>
Spamto: <bin@xxxxxxx>
|
