[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: [cobalt-users] Security violations



It's a Windows 2000/XP box with Dynamic DNS enabled. I wrote a Slashdot
thread about it here:

http://slashdot.org/comments.pl?sid=23233&cid=2504562

Ask them to uncheck the box labeled "Register this computer's addresses
in DNS" in their network properties.

It's not really much to worry about, anyway -- read my Slashdot post for
more info.

Erica

--__--__--

Message: 4
From: "Robbert Hamburg \(HaVa Web- & Processdesign\)" <user@xxxxxxx>
To: <cobalt-users@xxxxxxxxxxxxxxx>
Date: Mon, 12 Nov 2001 15:16:17 +0100
Subject: [cobalt-users] Security violations
Reply-To: cobalt-users@xxxxxxxxxxxxxxx

Since today I get these error messages from logcheck:

Security Violations
=-=-=-=-=-=-=-=-=-=
Nov 12 08:25:08 www named[592]: denied update from [195.121.232.7].3567
for
"XXXXXXXXXXX.nl"
Nov 12 08:25:08 www named[592]: denied update from [195.121.232.7].3580
for
"XXXXXXXXXXX.nl"
Nov 12 08:25:08 www named[592]: denied update from [195.121.232.7].3585
for
"XXXXXXXXXXX.nl"
Nov 12 08:25:08 www named[592]: denied update from [195.121.232.7].3587
for
"XXXXXXXXXXX.nl"
Nov 12 08:25:09 www named[592]: denied update from [195.121.232.7].3588
for
"XXXXXXXXXXX.nl"
Nov 12 08:25:09 www named[592]: denied update from [195.121.232.7].3600
for
"XXXXXXXXXXX.nl"
Nov 12 08:25:12 www named[592]: denied update from [195.121.232.7].3608
for
"XXXXXXXXXXX.nl"
Nov 12 08:25:13 www named[592]: denied update from [195.121.232.7].3619
for
"XXXXXXXXXXX.nl"

How do I block this one so that I don't get this errror any more and so
that
this IP can't use it anymore connecting to named.

The IP is a DIALUP ip ! So I donot need that named transfer !

Suggestions are more than welcome !

---- Robbert