Date: Wed, 10 Apr 2002 17:14:31 +0200 From: Olivier Cortes <olive@deep-ocean.org> To: freebsd-security@freebsd.org Subject: Re: Mysterious entries in kernel log relating to DNS Message-ID: <20020410151431.GA3980@neptune.deep-ocean.local> In-Reply-To: <20020410143646.56360.qmail@web11807.mail.yahoo.com> References: <20020410143646.56360.qmail@web11807.mail.yahoo.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, Apr 10, 2002 at 07:36:46AM -0700, X Philius wrote: > Question: > Periodically (a few times a week) I get these entries in the security > email autimagically sent by the standard scripts in periodic. Sometimes > there are many of them, and sometimes there are only a few or none. I > *am* using IPFW, however these entries are not being blocked by my last > rule, which I have numbered 999 (an example entry that *is* being > blocked by rule number 999 is also pasted below for clarity). My > understanding is that this log entry means that an attempt is being > made by localhost to access the name server on localhost, but that bind > is not listening or the request is malformed. I realize that this may > not be a question for security, but it *is* generated by the built in > FreeBSD security scripts, so I thought I'd start here. Thanks in > advance for any light you can shed on this phenom. this has been discussed on this list or on stable. it is related to a timeout [problem] on your bind. search the archive for more info. hth, -- Olivier Cortes GPG 1024/46CE0A51 : 8DB6 A56C 00CA DA0F F77F 86EB E86A 803C 46CE 0A51 To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20020410151431.GA3980>