From owner-freebsd-questions Thu Nov 22 5:25:21 2001 Delivered-To: freebsd-questions@freebsd.org Received: from cartman.private.techsupport.co.uk (cabletel1.cableol.net [194.168.3.4]) by hub.freebsd.org (Postfix) with ESMTP id 05A6137B416 for ; Thu, 22 Nov 2001 05:25:16 -0800 (PST) Received: from ceri by cartman.private.techsupport.co.uk with local (Exim 3.31 #1) id 166tpF-0005NH-00; Thu, 22 Nov 2001 13:23:33 +0000 Date: Thu, 22 Nov 2001 13:23:33 +0000 From: Ceri To: Walter Whitesell II Cc: freebsd-questions@freebsd.org, Jonathan Chen Subject: Re: log entrys Message-ID: <20011122132333.A14715@cartman.private.techsupport.co.uk> References: <002a01c172e1$6b8b8bc0$0500a8c0@BIGMOUSE3> <20011122131021.A91710@jonc.itouch> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: <20011122131021.A91710@jonc.itouch>; from jonathan.chen@itouch.co.nz on Thu, Nov 22, 2001 at 01:10:21PM +1300 Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG On Thu, Nov 22, 2001 at 01:10:21PM +1300, Jonathan Chen said: > On Wed, Nov 21, 2001 at 05:08:22PM -0600, Walter Whitesell II wrote: > > We have these log entrys in our messages logfile do you know what it might mean? > > > > Nov 21 04:55:56 ns1 named[82]: unapproved update from [65.202.13.36].1194 for microlab.com > > Nov 21 04:57:34 ns1 named[82]: unapproved update from [65.202.13.36].1220 for microlab.com > > Very likely, some Windows host is querying your DNS for all hosts in > its domain. No, that's not it. A Windows 2000 (possibly XP) machine on 65.202.13.36 has microlab.com entered as it's domain name, and nobody has unticked the box that says ``register this connection's address in DNS'', which is ticked by default, much to my chagrin : [root@ns1 /]$ grep -c update /data/namedb/logs/security.log 373690 Untick that box on that host and reboot it (even though windows doesn't say you need to, you do). Ceri -- I can please only one person per day. Today is not your day. Tomorrow isn't looking good either. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message