Re: [cobalt-users] A ton of lame servers in /var/log/messages Raq3 - Solved

["Dave" <maxdoubt@xxxxxx>]

Subject: [cobalt-users] A ton of lame servers in /var/log/messages Raq3


> literally 1000's of them that are coming through alphabetized?  Looked at
> messages log for April 5th and there are over 1500:
>
> <snip>...
> Apr  5 22:32:18 ns named[351]: Lame server on 'aacm.com' (in 'aacm.com'?):
> [211.232.149.47].53 'NS2.TWISTER.com'
> Apr  5 22:32:18 ns named[351]: Lame server on 'aacm.com' (in 'aacm.com'?):
> [64.49.211.88].53 'NS0.TWISTER.com'
> Apr  5 22:32:18 ns named[351]: Lame server on 'aacm.com' (in 'aacm.com'?):
> [211.232.149.40].53 'NS1.TWISTER.com'
> Apr  5 22:32:18 ns named[351]: Lame server on 'aahh.com' (in 'aahh.com'?):
> [216.21.234.25].53 'DNS29.NAMEBARGAIN.com'
> Apr  5 22:32:18 ns named[351]: Lame server on 'aahh.com' (in 'aahh.com'?):
> [216.21.226.25].53 'DNS30.NAMEBARGAIN.com'
> Apr  5 22:32:23 ns named[351]: Lame server on 'aahha.com' (in 'aahha.com'?):
> [212.160.67.252].53 'ELEET.WEBMEDIA.PL'
> Apr  5 22:32:23 ns named[351]: Lame server on 'aahha.com' (in 'aahha.com'?):
> [212.160.67.2].53 'GORDON.WEBMEDIA.PL'
> <snip>...

Hi all,

Just trying to practice good e-mail list etiquette by sending the solution to
the archives.  As it turns out, the problem was one of our clients, who was
doing their own e-mail, had an open relay which was abused.  Since we provide
DNS and web hosting with an MX record pointing to their IP, we got the named
LAME messages.  Poor admin had 60,000+ bounces to deal with today.....

Regards,

Max~