[cobalt-users] "unapproved update from [212.161.41.140]" error

["fastmedia" <inc@xxxxxxxxxxxxx>]

i've received this error a bazillion times over the last weeks:

# tail /var/log/messages
Feb  6 22:04:39 www named[356]: unapproved update from [212.161.41.140].8200
for domain.com
Feb  6 22:09:31 www named[356]: unapproved update from [212.161.41.140].8226
for domain.com
Feb  6 22:09:32 www named[356]: unapproved update from [212.161.41.140].8227
for domain.com


some research indicates that it might be a windows 2000 machine,
apparently if someone names their machine the same name as your
domain, w2k attempts to update your domain's nameserver??

anyway, i tried to bar access using hosts.deny but it fails to
make a difference.

i entered it in hosts.deny thus:

ALL: 212.161.41.140

and rebooted the raq, but this failed to block the requests.

i've also written to the isp according to arin, but yet to hear
anything, and i don't expect them to be interested at all.


how can i block these inbound requests for good?



thanks :)