[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [cobalt-users] popper problems HELP!



On Fri, 9 Feb 2001, Brian Watters  wrote:

> Feb  9 11:03:47 ns1 in.qpopper[3080]: warning: host name/address 
> mismatch: 64.84.33.20 != 20-dsl1.ca.totlcomds.net
> Feb  9 11:03:47 ns1 in.qpopper[3080]: refused connect from 
> 64.84.33.20
> 
> Anyone have an idea whats going on here??

Looks like someonemade a slight change to dns?
That ip returns  different names depending on which nameserver you ask...
And it reverses to a different IP than you started with

ns2.totlcom.com
20.33.84.64.in-addr.arpa, type = PTR, class =IN
Name:    20-dsl1.ca.totlcomds.net

Name:    20-dsl1.ca.totlcomds.net
Address:  64.84.32.20

(note 33/32 in second number)

--
A different server says that
Name:    20-dsl2.ca.totlcomds.net
Address:  64.84.33.20

(20-dsl1.ca.totlcomds.net doesn't resove on that server)

Me thinks there's a typo in the zone file -/

one of the very few self checks qpopper does is to run the connecting ip
forwards and then backwards to make sure it still gets the same ip, it
probably looked up dsl1 and got the IP then looked ip the ip and got dsl2
, when it looked ip dsl2 it got a different ip address and decided it was
being spoofed...