[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [cobalt-users] Unapproved "approved zone transfer"
- Subject: Re: [cobalt-users] Unapproved "approved zone transfer"
- From: "Gerald Waugh" <gerald@xxxxxxxxx>
- Date: Mon Mar 5 15:42:45 2001
- List-id: Mailing list for users to share thoughts on Cobalt products. <cobalt-users.list.cobalt.com>
"Rodolfo Paiz" <rpaiz@xxxxxxxxxxxxxx>
ON: Saturday, March 03, 2001 11:31 AM
> Hi, all...
>
> I found this little goody mailed to me this morning by LogCheck:
>
> Mar 3 03:48:21 adan named[443]: approved AXFR from
> [198.163.115.99].4230 for "informa.org.gt"
> Mar 3 03:48:21 adan named[443]: zone transfer (AXFR) of
> "informa.org.gt" (IN) to [198.163.115.99].4230
>
> The curious thing is:
>
> * I don't use this domain (all traffic is pointed to the .com)
> * Everything in named.conf says "allow-update from none"
> * I don't see anything else in the logs from this IP
> * I don't even know anyone in Canada
> * Why the hell would mudpuppy.armchair.mb.ca want my zone file?
>
<SNIP>
use allow-transfer { ip.add.re.ss1; ip.add.re.ss2 };
Maybe list your slaves and / or masters
Gerald