Bind Question

kemplej · 03-29-2006, 10:03 AM

I'm starting to see this once a hour in my syslog. Any idea what their trying to do?

Mar 29 09:33:42 ns1 named[6282]: client 0.0.0.0#2784: update 'productionpress.com/IN' denied

Note: ip address changed obviously to protect the person.

Thanks!

Justyn

ckoniecny · 03-29-2006, 01:47 PM

Straight from Bind themselves:
http://www.isc.org/index.pl?/sw/bind/

Q: I keep getting log messages like the following. Why?

Jun 21 12:00:00.000 client 10.0.0.1#1234: update denied

A: Someone is trying to update your DNS data using the RFC2136 Dynamic Update protocol. Windows 2000 machines have a habit of sending dynamic update requests to DNS servers without being specifically configured to do so. If the update requests are coming from a Windows 2000 machine, see http://support.microsoft.com/support.../q246/8/04.asp for information about how to turn them off.