Re: [cobalt-users] "unapproved update from [212.161.41.140]" error

["fastmedia" <inc@xxxxxxxxxxxxx>]

thanks Jeff

> > Feb  6 22:09:32 www named[356]: unapproved update from
[212.161.41.140].8227
> > for domain.com

> This is coming from your DNS server.  Are you acting as a secondary DNS
for any
> domains?  Adding those entries into /etc/hosts.deny will not affect this
> request.

it's definitely a w2k server, somewhere in europe, that's lodging
all the requests.  there are a wealth of documents and mail list
archives in google since december regarding this "feature" of win-
dows 2000.

i don't run secondary on this machine.. and.. the offending ip
address has nothing to do with me or my providor.


> Try turning debugging for named, as root:
> $ ndc
> ndc> querylog
> # if you want _really_ verbose type:
> ndc> trace 1
> ndc> Ctrl-C
> $ tail -f /var/log/message
>
> Wait for it to happen again.

thanks for this !


i'm really hoping someone can explain how to block an ip address
from accessing my named.