[cobalt-users] Unapproved Update / Lame Server Entries

[David <david_dean@xxxxxxx>]

Hi All,

Can someone shed some light on two distinctive entries that keep popping up in
my "messages" log.

-The 1st entry (below) appears about a zillion times about every 3 seconds and
is referencing a client's domain housed on our systems. The client is on a
private T1 network and the IP referenced is from within their network. Why
would they attempt to quarry "named" constantly for updates or changes at
3-second intervals.  Isn't that a bit overkill? It doesn't matter how many
times they try, it's not going to effect anything if their TTL is set to
86400, correct?

Jul  9 12:29:49 ns1 named[1512]: unapproved update from [216.198.xx.xxx].4897
for client_domain.com


-The second entry of concern appears as "LAME SERVER" entries for domain's
we've never housed. What does this mean, there's dozens of entries like this
in the log?

Jul  8 22:25:49 ns1 named[1614]: Lame server on '3.199.40.206.in-addr.arpa'
(in '199.40.206.in-addr.arpa'?): [2
05.214.45.10].53 'NS3.HLC.NET'

Jul  8 22:26:50 ns1 named[1614]: Lame server on 'waystation.com' (in
'waystation.com'?): [207.189.139.17].53 'M
ONET.JOLLYGREEN.COM'

Jul  8 22:26:50 ns1 named[1614]: Lame server on 'waystation.com' (in
'waystation.com'?): [207.189.139.16].53 'D
AGGER.CETISP.NET'

Jul  8 22:26:52 ns1 named[1614]: Lame server on 'austinrvrentals.com' (in
'austinrvrentals.com'?): [164.109.10.
23].53 'NS2.DIGEX.NET'


Does anyone have any comments or suggestions for either entry? Thanks in
advance for any input or insight.

David

____________________________________________________________________
Get free email and a permanent address at http://www.netaddress.com/?N=1