Re: [cobalt-users] [RaQ3] Tracking down unusually high use?

[Bill Gunning <billgun@xxxxxxxxxxxxxxxxxxxxxxxx>]

The same thing started happening to my RaQ, and I used my
firewall to block the DNS port on all IP's except for
the one IP I was using for DNS... This solved the problem,
so I think someone was trying to bother one of my
clients with DNS lookups or something... I checked
the /etc/named directory for any strange file's just
in case someone tried to use the DNS entry point
but everything looks ok... If you don't need DNS you
can uncheck it in the control panel or buy a small
firewall like a NetScreen or SonicWall or something
even better...

Bill

>> Recently a RaQ3 has started to show really high incoming traffic during the
>> night. The site usage facility on the GUI doesn't reflect this high amount
>> of traffic. I suspect a possible lame DNS entry. Are there log files for
DNS
>> queries or errors.
>
>> Maybe I'm barking up the wrong tree, anyone got any suggestions. The
>> incoming traffic is between 18Mb and 30Mb per hour, reasonably constant and
>> only at night, the outgoing is at it's normal level for this RaQ. The
>> traffic stats are taken from my router.
>
>> Can someone offer any advice please?