I've got check log running on my woody box. The box is running an internal only DNS server behind a firewall that should be denying access to the outside world. 'checklog' picked out a couple of 'unusual' entries which I've not seen before in my logs:
Jun 19 11:56:13 thebox named[202]: invalid RR type 'A6' in additional section (name = 'ns0.wossname.org.uk') from [213.212.70.59].53 Jun 19 11:56:13 thebox named[202]: invalid RR type 'A6' in additional section (name = 'wossname.org.uk') from [213.212.70.59].53 Jun 19 11:56:13 thebox named[202]: invalid RR type 'A6' in additional section (name = 'ns0.wossname.org.uk') from [213.212.70.59].53 Jun 19 11:56:13 thebox named[202]: invalid RR type 'A6' in additional section (name = 'wossname.org.uk') from [213.212.70.59].53 Jun 19 11:56:13 thebox named[202]: invalid RR type 'A6' in additional section (name = 'ns0.wossname.org.uk') from [213.212.70.59].53 Jun 19 11:56:13 thebox named[202]: invalid RR type 'A6' in additional section (name = 'wossname.org.uk') from [213.212.70.59].53 Jun 19 11:56:13 thebox named[202]: invalid RR type 'A6' in additional section (name = 'ns0.wossname.org.uk') from [213.212.70.59].53 Jun 19 11:56:13 thebox named[202]: invalid RR type 'A6' in additional section (name = 'wossname.org.uk') from [213.212.70.59].53 I checked 213.212.70.59: [EMAIL PROTECTED]:~$ host 213.212.70.59 Name: ns1.caladan.net.uk Address: 213.212.70.59 caladan.net.uk appears to be a co-location outfit based in Manchester UK. wossname.org.uk appears to be someone's hope pages. Until I saw these entries I'd never heard of wossname.org.uk or caladan.net.uk. What is happening here? And is it something I should be worried about? There doesn't appear to be anything different about my bind config on thebox. I've not seen anything else in the logs since seeing these entries. Cheers, Andrew "Whether you think you can, Or whether you think you can't You are right!" -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
