Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 22 Feb 2001 12:29:42 -0500
From:      Robert Hough <rch@solveinteractive.com>
To:        freebsd-isp@FreeBSD.ORG
Subject:   Re: annoying denied dns updates from lame nt/2000 servers
Message-ID:  <20010222122942.A46614@solveinteractive.com>
In-Reply-To: <5.0.2.1.2.20010222115101.00aa29a0@mailhost.lightning.net>; from jreddy@lightning.net on Thu, Feb 22, 2001 at 12:05:18 -0500
References:  <3A909F0D.549C38D1@confusion.net> <GIEHKBHPBGKJPNMBCOHFEEHJCAAA.troy@psknet.com> <5.0.2.1.2.20010222115101.00aa29a0@mailhost.lightning.net>

next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, Feb 22, 2001, John Reddy wrote:
> 
> What about a scenario of a user base of tens of thousands, via DSL, cable 
> modem, dialup, etc.  Getting hundreds or thousands of customers with Win2k 
> running, and running dynamic update.

Just curious, but couldn't you just use ip filters to block this stuff
in the first place?

Dirty fix for this problem is just remove the log messages from the
source.  In the ns_update.c, you'll find something like this:

ns_notice(ns_log_security, "denied update from %s for \"%s\"",

like I said, not exactly a graceful way of doing things, but hey - if it
bugs/worries you that much... :)

-- 
Robert Hough (rch@solveinteractive.com)

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010222122942.A46614>