Security Incidents mailing list archives

Re: Bad Referrals?

From: Chip McClure <vhm3 () HADES DNSALIAS NET>
Date: Wed, 7 Feb 2001 18:10:31 -0800

It's a poorly configured DNS server. They (the site in question) doesn't
have their reverse DNS set up correctly.

-----Original Message-----
From: Incidents Mailing List [mailto:INCIDENTS () SECURITYFOCUS COM]On Behalf
Of Derek Kwan
Sent: Wednesday, February 07, 2001 1:06 PM
To: INCIDENTS () SECURITYFOCUS COM
Subject: Bad Referrals?

Hello world,

 Lately I have notice lots of bad referrals messages in my log file and
when Itake a closer look, I have a bunch of these..

Jan 14 16:55:22 KWAN named[82]: bad referral (188.207.IN-ADDR.ARPA !<
7.188.207.in-addr.arpa)

 Any ideas what is happening?

 Note: I have nothing to deal with 207.188.* network.. and I don't know
what causes these messages... Am I being attack?

Derek

Current thread:

Re: DNS server crashed, (continued)
- - - Re: DNS server crashed Graphic Rezidew (Feb 06)
    - Re: DNS server crashed Jason Lewis (Feb 07)
    - Re: DNS server crashed karthik krishnamurthy (Feb 06)
    - Re: DNS server crashed Andrei MURESAN (Feb 07)
    - Re: DNS server crashed Max Gribov (Feb 07)
    - Re: DNS server crashed Bryan Bradsby (Feb 10)
- Re: Crazy port 111 scans Tyrannis Von Nettesheim (Feb 06)
- Re: Crazy port 111 scans Reeves, Mike (Feb 06)
- Re: Crazy port 111 scans Reeves, Mike (Feb 07)
  - Bad Referrals? Derek Kwan (Feb 07)
    - Re: Bad Referrals? Chip McClure (Feb 07)
    - Re: Bad Referrals? Derek Kwan [321844] (Feb 07)
    - Re: Bad Referrals? Valdis Kletnieks (Feb 10)