Full Disclosure mailing list archives

Re: Named and the mysterious .so resolves


From: Michal Zalewski <lcamtuf () dione ids pl>
Date: Tue, 10 Apr 2007 23:30:43 +0200 (CEST)

On Tue, 10 Apr 2007, James Lay wrote:

Soo...I see these in my logs from time to time:

Apr 10 14:46:37 mail named[739]: unexpected RCODE (REFUSED) resolving
'pam_mysql.so/NS/IN': 209.68.0.85#53

Can anyone shed any light on this?  Thanks all!  Below is a complete
list of .so's attempted:

Some dude mistakenly tried:

   for i in *; do host -t ns $i;done

...in /lib instead of /0wn3d-domains?

/mz

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


Current thread: