Re: DNS Messages

From: Christoph K (cpuat_private)
Date: Wed Jul 16 2003 - 03:02:48 PDT

  • Next message: John Leach: "Re: Patched IIS/frontpage host compromised 7-1-2003"

    
     ('binary' encoding is not supported, stored as-is)
    In-Reply-To: <A0066BC975E5D211B8F20008C7B10EC9017EE3CFat_private>
    
    we have exactly the same messages here. the ip addresses which shows up in 
    the log are the ones from the ISP dns servers which i have configured as 
    forwarders in our internal dns server. i also get this error when a user 
    with a laptop is connecting to our network and its configured to belong to 
    another domain that ours. we actualy provide internet to external users, 
    so i cannot avoid this. but in this case the error makes sense.
    
    the ip in your log is 216-190-200-1.nas1.mob.ut.frontiernet.net, is that 
    your isp too? 
    
    greetings
    christoph
    
    ----------------------------------------------------------------------------
    Attend the Black Hat Briefings & Training, July 28 - 31 in Las Vegas, the 
    world's premier technical IT security event! 10 tracks, 15 training sessions, 
    1,800 delegates from 30 nations including all of the top experts, from CSO's to 
    "underground" security specialists.  See for yourself what the buzz is about!  
    Early-bird registration ends July 3.  This event will sell out. www.blackhat.com
    ----------------------------------------------------------------------------
    



    This archive was generated by hypermail 2b30 : Wed Jul 16 2003 - 15:10:55 PDT