Hey, I have some bind questions I can't answer nor find answers to via google so I was wondering/hoping someone here can help out! I have this guy in my company that sends out a pretty large email list ever week and I got a spamcop notice from one of his recipients so I went to the mail log to look up the message number so I can email him to remove that user from his list and noticed this
localhost named[546]: bad referral (1.130.24.in-addr.arpa !< 15.1.130.24.in-addr.arpa) from [24.130.4.8].53 Jan 25 09:34:56 localhost named[546]: bad referral (1.130.24.in-addr.arpa !< 15.1.130.24.in-addr.arpa) from [24.130.4.8].53 I looked this up and saw a response from someone on a bind list saying that's because someone else has an improper ns record for my site. So I traced the ip to mediaone.com but they don't have a site so... ? Then I looked at syslog on ns1 and saw this below. named[207]: Response from unexpected source ([192.168.1.35].53) I looked this up as well but found nothing on it. Anyone see this before in syslog? If so what did you come up with as the cause? Thanks, Justin
