Security Incidents mailing list archives

DNS question ?


From: Evensen Lars Christian <Lars.Christian.Evensen () NETCOM-GSM NO>
Date: Thu, 8 Feb 2001 11:03:41 +0100

Hi

After scanning thru our DNS security log, i notice a lot of entries on the
form

notice; denied update from [xxx.yyy.zzz.www] for "zzz.yyy.xxx.in-addr.arpa".

All these IP-addresses belong to our dialin nodes.

I have been told that this is probably windows 2000/NT trying to announce it
self to the nameserver. Do anyone know if this is the case, or is this a
more serious issue i have on my hands.

Regards
Lars Evensen


Current thread: