Security Incidents mailing list archives

Re: Bad Referrals?


From: "Derek Kwan [321844]" <Derek () KWAN CA>
Date: Wed, 7 Feb 2001 21:32:44 -0500

But AFAIK nothing on my box is try to do a reverse look up on that IP....
Hummmm..... Maybe something that I don't know is happening on my box?

Derek

Chip McClure wrote:

It's a poorly configured DNS server. They (the site in question) doesn't
have their reverse DNS set up correctly.

-----Original Message-----
From: Incidents Mailing List [mailto:INCIDENTS () SECURITYFOCUS COM]On Behalf
Of Derek Kwan
Sent: Wednesday, February 07, 2001 1:06 PM
To: INCIDENTS () SECURITYFOCUS COM
Subject: Bad Referrals?

Hello world,

 Lately I have notice lots of bad referrals messages in my log file and
when Itake a closer look, I have a bunch of these..

Jan 14 16:55:22 KWAN named[82]: bad referral (188.207.IN-ADDR.ARPA !<
7.188.207.in-addr.arpa)

 Any ideas what is happening?

 Note: I have nothing to deal with 207.188.* network.. and I don't know
what causes these messages... Am I being attack?

Derek


Current thread: