Re: [cobalt-users] "unapproved update from [212.161.41.140]" error

[Aaron Bond <prdamrcn@xxxxxxxxxxx>]

Sounds to me like your news feed might be misconfigured... i.e. your news
feed provider is sending updates, and your box is rejecting them (or at
least complaining about it)...

Aaron
----- Original Message -----
From: "fastmedia" <inc@xxxxxxxxxxxxx>
To: <cobalt-users@xxxxxxxxxxxxxxx>; <isp-webhosting@xxxxxxxxxxxxxxxxxx>
Sent: Tuesday, February 06, 2001 5:24 AM
Subject: [cobalt-users] "unapproved update from [212.161.41.140]" error


>
>
>
> i've received this error a bazillion times over the last weeks:
>
> # tail /var/log/messages
> Feb  6 22:04:39 www named[356]: unapproved update from
[212.161.41.140].8200
> for domain.com
> Feb  6 22:09:31 www named[356]: unapproved update from
[212.161.41.140].8226
> for domain.com
> Feb  6 22:09:32 www named[356]: unapproved update from
[212.161.41.140].8227
> for domain.com
>
>
> some research indicates that it might be a windows 2000 machine,
> apparently if someone names their machine the same name as your
> domain, w2k attempts to update your domain's nameserver??
>
> anyway, i tried to bar access using hosts.deny but it fails to
> make a difference.
>
> i entered it in hosts.deny thus:
>
> ALL: 212.161.41.140
>
> and rebooted the raq, but this failed to block the requests.
>
> i've also written to the isp according to arin, but yet to hear
> anything, and i don't expect them to be interested at all.
>
>
> how can i block these inbound requests for good?
>
>
>
> thanks :)
>
>
>
>
>
>
>