nanog mailing list archives
Re: is your host or dhcp server sending dns dynamic updates for rfc1918?
From: Mike Parson <mparson () bl org>
Date: Fri, 19 Apr 2002 14:21:40 -0500
On Thu, Apr 18, 2002 at 04:57:59PM -0700, Paul Vixie wrote: <snip>
what these files are is a whole lot of lines that look like (broken by me): 18-Apr-2002 16:16:05.491 security: notice: \ denied update from [63.198.141.30].2323 for "168.192.in-addr.arpa" IN by "a whole lot" i mean we've logged 3.3M of these in the last four hours.
I saw similar behavior on my little box (ns.bl.org) about a year or so ago, logs have long since rotated out, so I don't recall exactly when, but there was an IP somewhere in S. America trying to do a dyn update, something like one attempt every two seconds. I emailed the ISP, didn't get anything back, so I set up a black-hole in BIND and stuck that /24 in it. A few days later, it was back, from a different /24, but in the same /16, so I blackholed the /16. Then again, from another /16, but the same ISP, so I blackholed it. Haven't seen anything in a long time. -- Michael Parson mparson () bl org
Current thread:
- Re: is your host or dhcp server sending dns dynamic updates for rfc1918?, (continued)
- Re: is your host or dhcp server sending dns dynamic updates for rfc1918? Paul Vixie (Apr 19)
- Re: is your host or dhcp server sending dns dynamic updates for rfc1918? David Conrad (Apr 19)
- RE: is your host or dhcp server sending dns dynamic updates for rfc1918? Jeroen Massar (Apr 19)
- RE: is your host or dhcp server sending dns dynamic updates for rfc1918? Daniel Senie (Apr 19)
- Re: is your host or dhcp server sending dns dynamic updates for rfc1918? Derek J. Balling (Apr 19)
- Re: is your host or dhcp server sending dns dynamic updates for Paul Vixie (Apr 19)
- Re: is your host or dhcp server sending dns dynamic updates for Bill Woodcock (Apr 19)
- Re: is your host or dhcp server sending dns dynamic updates for Paul Vixie (Apr 19)
- Re: is your host or dhcp server sending dns dynamic updates for rfc1918? Greg Maxwell (Apr 19)
- Re: is your host or dhcp server sending dns dynamic updates for rfc1918? Valdis . Kletnieks (Apr 19)
- RE: is your host or dhcp server sending dns dynamic updates for rfc1918? Bruce Williams (Apr 19)
- Re: is your host or dhcp server sending dns dynamic updates for rfc1918? Valdis . Kletnieks (Apr 19)
- Re: is your host or dhcp server sending dns dynamic updates for rfc1918? Mike Parson (Apr 19)
- RE: is your host or dhcp server sending dns dynamic updates for rfc1918? Ukyo Kuonji (Apr 19)
- RE: is your host or dhcp server sending dns dynamic updates for rfc1918? Eric Germann (Apr 19)
- Re: is your host or dhcp server sending dns dynamic updates for rfc1918? Paul A Vixie (Apr 19)
- Re: is your host or dhcp server sending dns dynamic updates for rfc1918? Paul A Vixie (Apr 19)
- Re: is your host or dhcp server sending dns dynamic updates for rfc1918? Simon Higgs (Apr 19)
- Re: is your host or dhcp server sending dns dynamic updates for rfc1918? Pete Ehlke (Apr 19)
- Re: is your host or dhcp server sending dns dynamic updates for rfc1918? Simon Higgs (Apr 19)
- Re: is your host or dhcp server sending dns dynamic updates for rfc1918? Valdis . Kletnieks (Apr 19)
- Re: is your host or dhcp server sending dns dynamic updates for rfc1918? Simon Higgs (Apr 19)
- connections to SOA mname? bert hubert (Apr 20)
- Re: is your host or dhcp server sending dns dynamic updates for rfc1918? Nathan J. Mehl (Apr 20)