Security Basics mailing list archives

RE: Wierd named log..


From: "Nick Soulliere" <nick () annis com>
Date: Tue, 17 Feb 2004 08:12:18 -0500

I just noticed today a strange msg that keeps showing up in my log files,
that only started today, but is constantly happening.. any info you could
give me would be greatly apreciated :)

Here is the snip from the log..

Feb 12 14:51:51 ns1 named[3496]: socket.c:1100: unexpected error:
Feb 12 14:51:51 ns1 named[3496]: internal_send: 244.254.254.254#53: Invalid
argument
Feb 12 14:51:52 ns1 named[3496]: socket.c:1100: unexpected error:
Feb 12 14:51:52 ns1 named[3496]: internal_send: 244.254.254.254#53: Invalid
argument
Feb 12 14:51:52 ns1 named[3496]: socket.c:1100: unexpected error:
Feb 12 14:51:52 ns1 named[3496]: internal_send: 244.254.254.254#53: Invalid
argument

~Chris~

Upon checking our servers, I find all our four servers are recording this
error too, only in the last few days>

--
JP

The following is a snippet posted by Mark Andrews from ISC in the
comp.protocols.dns.bind newsgroup:

This is becoming a FAQ.

You have a client trying to lookup relays.monkeys.com (a dead anti-spam
list)
which has a bad server with a CLASS E addressess.

* Mark the server as bogus.
* Fix the broken MTA generating the queries.

Mark

server 244.254.254.254 {
        bogus yes;
};


Nick Soulliere
Network / Systems Administrator
TechniServe, formerly Annis Group
phone: 248.395.0001 Ext. 226
fax:   248.395.0010
email: nick () annis com


---------------------------------------------------------------------------
Free trial: Astaro Security Linux -- firewall with Spam/Virus Protection

Protect your network with the comprehensive security solution that
integrates six applications for ease of use and lower TCO.

Firewall - Virus protection - Spam protection - URL blocking - VPN
- Wireless security.

Download 30-day evaluation at:
http://www.astaro.com/php/contact/securityfocus.php
----------------------------------------------------------------------------


Current thread: