Re: Interresting report by logcheck....

2002-02-04 Thread Noah Meyerhans
On Fri, Feb 01, 2002 at 03:47:21PM -0600, Brian McGroarty wrote: > > I'd appreciate it if you'd direct me to the newer material that > supersedes the information in RFC 1033, Noah. I'll be searching myself > as well. I don't wish to remain ignorant, of course. From RFC 1912 (Common DNS Operationa

Re: Interresting report by logcheck....

2002-02-01 Thread Adam Majer
On Fri, Feb 01, 2002 at 03:47:21PM -0600, Brian McGroarty wrote: > > admin singular -- robotattack.com is my home machine. > > RFC 1033 defines a machine name as an absolute address (A) or a > pointer (CNAME), and later states that an ns record contains a machine > name, which would seem to make

Re: Interresting report by logcheck....

2002-02-01 Thread Brian McGroarty
On Fri, Feb 01, 2002 at 04:01:48PM -0500, Noah Meyerhans wrote: > On Fri, Feb 01, 2002 at 02:10:07PM -0600, Adam Majer wrote: > > > > What does this mean? I am running bind but it is behind firewall and > > inaccesible from outside.. > > > > logcheck is being stupid. It sees the word "attack" i

Re: Interresting report by logcheck....

2002-02-01 Thread Adam Majer
On Fri, Feb 01, 2002 at 04:01:48PM -0500, Noah Meyerhans wrote: > On Fri, Feb 01, 2002 at 02:10:07PM -0600, Adam Majer wrote: > > > > What does this mean? I am running bind but it is behind firewall and > > inaccesible from outside.. > > > > logcheck is being stupid. It sees the word "attack" i

Re: Interresting report by logcheck....

2002-02-01 Thread Noah Meyerhans
On Fri, Feb 01, 2002 at 02:10:07PM -0600, Adam Majer wrote: > > What does this mean? I am running bind but it is behind firewall and > inaccesible from outside.. > logcheck is being stupid. It sees the word "attack" in the message, and warns you about it. The message from bind is simply statin