The DNS server encountered an invalid domain name in a packet from 127.0.0.1. The packet is rejected.
it started with 192.168.xxx.16 sending one paket and it being rejected then I get a load of the above errors. This server has been running for a few years and for no reason at all this started yesterday.
□ΞVΞ□
the localhost is trying to use an invalid domain name to lookup, eg:
Most common cause of invalid DNS names I've seen are
1.) mail server fake bounce addresses eg: reply to of someone@other.klfjgdf
2.) your machine has been compromised and fake dns lookups are being used.
It is Inevitable.....
Dear oh dear.... not good.
Any advice? Is there any way that the recent issues with Telewest could have create a problem with my DNS?
Last edited by Jay; 18-12-2007 at 01:30 PM.
□ΞVΞ□
???? this is your server ????your getting look ups from 127.0.0.1 ???? how is your machine setup, is it a true root server or just a forwarder to telewest ? are you running a mail server on it ?
It is Inevitable.....
no mail server. It caches lookups and forwards any it can't resolve to telewests DNS servers
□ΞVΞ□
I'd look at what localhost is trying to look up in the logs and take it from there, or if required enable zone logging and see what is looking up what.
It is Inevitable.....
Jay (18-12-2007)
will do.
I am wondering if a zonealarm issue may have casued this? I noticed in the logs there was an error in zonealarm so i do the dirty deed and restarted the server. I'll let you know what I find.
□ΞVΞ□
looks like the telewest DNS servers had poluted my servers DNS, I flushed all the DNS cache on the server and it seems ok. Must have been due to the Telewest problems.
□ΞVΞ□
how can telewest polute your servers ? if the only thing your doing is forwarding non-authoritive queries ?
It is Inevitable.....
Our DNS caches the requests, when the DNS servers went down at telewest the issue accured, when I flushed the DNS servers cache the error went away.
Maybe just unlucky that it happened at the same time?
I have seen this before but it was due to some git using the MS exploit to forward DNS requests to their server.
□ΞVΞ□
There are currently 1 users browsing this thread. (0 members and 1 guests)
SCAN.care@HEXUS
Posting Permissions
LinkBack URL
About LinkBacks
Reply With Quote