From owner-freebsd-questions@FreeBSD.ORG Wed Jun 11 00:26:50 2008 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 0FBC4106567C for ; Wed, 11 Jun 2008 00:26:50 +0000 (UTC) (envelope-from steve@ibctech.ca) Received: from ibctech.ca (v6.ibctech.ca [IPv6:2607:f118::b6]) by mx1.freebsd.org (Postfix) with SMTP id A366D8FC14 for ; Wed, 11 Jun 2008 00:26:49 +0000 (UTC) (envelope-from steve@ibctech.ca) Received: (qmail 45549 invoked by uid 89); 11 Jun 2008 00:27:22 -0000 Received: from unknown (HELO ?IPv6:2607:f118::5?) (steve@ibctech.ca@2607:f118::5) by 2607:f118::b6 with ESMTPA; 11 Jun 2008 00:27:21 -0000 Message-ID: <484F1C45.1050406@ibctech.ca> Date: Tue, 10 Jun 2008 20:28:53 -0400 From: Steve Bertrand User-Agent: Thunderbird 2.0.0.14 (Windows/20080421) MIME-Version: 1.0 To: Wojciech Puchar References: <20080610171600.R76827@wojtek.tensor.gdynia.pl> <484EA302.4070104@radel.com> <20080611000612.H13017@wojtek.tensor.gdynia.pl> <484EFBBE.8030502@radel.com> <20080611001613.Y13017@wojtek.tensor.gdynia.pl> In-Reply-To: <20080611001613.Y13017@wojtek.tensor.gdynia.pl> X-Enigmail-Version: 0.95.6 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: freebsd-questions@freebsd.org, Jon Radel Subject: Re: OT: lots of IPv6 DNS requests X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 11 Jun 2008 00:26:50 -0000 Wojciech Puchar wrote: >>> no it is not! that's why i'm asking. >> >> Oh, for heaven's sake. We all know you like to shoot off your mouth. >> Now go back to my mail and read it ALL THE WAY THROUGH BEFORE YOU >> ANSWER AGAIN. Jeez. >> > so maybe you should explain clearer because i do read what you write. In summary, what he means is this: You have a (perhaps legacy) DNS server running as dns3.tensor.gdynia.pl (RRs snipped for brevity): pearl# dig aaaa dns3.tensor.gdynia.pl dns3.tensor.gdynia.pl. 21682 IN AAAA 2001:4070:101:2::1 ...which appears to be the same IP address as your workstation. pearl# dig AAAA wojtek.tensor.gdynia.pl wojtek.tensor.gdynia.pl. 4732 IN AAAA 2001:4070:101:2::1 ...however, any attempt to gather information from dns3. simply fails, due to your administrative policy (named not allowing outside networks). I'm willing to bet that you will see attempts from 2607:f118::b6 (or ::b7) in your workstation logs as rejected for AAAA lookups. I don't see any reference to dns3. in the WHOIS, so perhaps it has been removed recently. Any provider who still has this dns3 server listed as a possible authoritative name server may round-robin to it and produce the logs on your workstation you are witnessing. It is very possible that this server is still listed as a NS for the domain and I just didn't look hard enough for it. FYI (IMHO), this type of question would be better suited for freebsd-net@. You would likely have far more eyes on your question over there by people who focus primarily on this sort of thing. Steve