Re: [cobalt-users] Unapproved Update / Lame Server Entries

["Brian Curtis" <admin@xxxxxxxxxxx>]

----- Original Message -----
From: "David" <david_dean@xxxxxxx>

> Hi All,
>
> Can someone shed some light on two distinctive entries that keep popping
up in
> my "messages" log.
>
> Jul  9 12:29:49 ns1 named[1512]: unapproved update from
[216.198.xx.xxx].4897
> for client_domain.com

This is probably a Windows 2000 workstation/server (improperly configured)
which is set to use your DNS servers for lookups.  I remember our first
Win2k machine hammered our DNS server with these kinds of entries.  I don't
remember the exact settings which causes Win2k do this, but I think it's
something to do with the DHCP service on the Win2k box.

> Jul  8 22:25:49 ns1 named[1614]: Lame server on
'3.199.40.206.in-addr.arpa'
> (in '199.40.206.in-addr.arpa'?): [2
> 05.214.45.10].53 'NS3.HLC.NET'

This, as I understand it, is your DNS failing to resolve a request due to an
improperly configured DNS server which holds the resolving target's host
records.

HTH,

BC