RE: Wierd named log..

["John [JP] Pennington" <johnp () bud sprint ca>]

On Mon, 16 Feb 2004, Shawn Jackson wrote:

> If multiple people are having this issue run up2date/get the new version
> (9.2.3) and/or checkout the ISC website, www.isc.org for information.


Hi,

I think this is the answer everyone is looking for

JP


+++++++++++++++++++++++
This is becoming a FAQ.

You have a client trying to lookup relays.monkeys.com (a dead anti-spam
list)
which has a bad server with a CLASS E addressess.

* Mark the server as bogus.
* Fix the broken MTA generating the queries.

Mark

server 244.254.254.254 {
        bogus yes;
};
++++++++++++++++++++++++



> Shawn Jackson
> Systems Administrator
> Horizon USA
> 1190 Trademark Dr #107
> Reno NV 89521
>
> www.horizonusa.com
> Email: sjackson () horizonusa com
> Phone: (775) 858-2338
>             (800) 325-1199 x338
>
>
>
> -----Original Message-----
> From: John Pennington [mailto:jp () sprint-canada net]
> Sent: Monday, February 16, 2004 11:43 AM
> To: security-basics () securityfocus com
> Subject: Re: Wierd named log..
>
>
> In-Reply-To: <00c301c3f1b4$3239ec50$0201000a@wlsn002>
>
>
> > I just noticed today a strange msg that keeps showing up in my log
> > files, that only started today, but is constantly happening.. any info
> > you could give me would be greatly apreciated :)
> >
> > Here is the snip from the log..
> >
> > Feb 12 14:51:51 ns1 named[3496]: socket.c:1100: unexpected error: Feb
> > 12 14:51:51 ns1 named[3496]: internal_send: 244.254.254.254#53: Invalid
>
> > argument Feb 12 14:51:52 ns1 named[3496]: socket.c:1100: unexpected
> > error: Feb 12 14:51:52 ns1 named[3496]: internal_send:
> > 244.254.254.254#53: Invalid argument
> > Feb 12 14:51:52 ns1 named[3496]: socket.c:1100: unexpected error:
> > Feb 12 14:51:52 ns1 named[3496]: internal_send: 244.254.254.254#53:
> Invalid
> > argument
> >
> > ~Chris~
>
> Upon checking our servers, I find all our four servers are recording
> this error too, only in the last few days
>
> --
> JP
>
> ------------------------------------------------------------------------
> ---
> Free trial: Astaro Security Linux -- firewall with Spam/Virus Protection
>
> Protect your network with the comprehensive security solution that
> integrates six applications for ease of use and lower TCO.
>
> Firewall - Virus protection - Spam protection - URL blocking - VPN
> - Wireless security.
>
> Download 30-day evaluation at:
> http://www.astaro.com/php/contact/securityfocus.php
> ------------------------------------------------------------------------
> ----

-- 
John Pennington, Analyst
Sprint Canada IP Network Technical Support Team,
Redundancy, we need no stinking redundany :)
Ext: 416-496-1644 x4657, General: 416-496-1644 x4949
Sprint Canada Public Looking Glass: http://ops.sprint-canada.net
:wq

---------------------------------------------------------------------------
Free trial: Astaro Security Linux -- firewall with Spam/Virus Protection

Protect your network with the comprehensive security solution that
integrates six applications for ease of use and lower TCO.

Firewall - Virus protection - Spam protection - URL blocking - VPN
- Wireless security.

Download 30-day evaluation at:
http://www.astaro.com/php/contact/securityfocus.php
----------------------------------------------------------------------------