CHAOS version.bind
Mr. James W. Laferriere
babydr at baby-dragons.com
Sat Jan 27 17:29:43 UTC 2001
Hello Vik , It is someone (probably) trying to acquire the
version number of your named daemon . It may well be reason
for alarm . As depending on the version there are exploits
that can be used to gain access to the system . Hth , JimL
ps: Disabling or changing the response isn't a cure . All that is
needed is to begin the various attack methods & see if any get
thru .
On Sat, 27 Jan 2001, Vik Heyndrickx wrote:
> Hi,
> In my newly set-up DNS server which is the SOA for some public IN domains, I
> found the following line in the logging of bind (named):
> XX+/212.68.193.196/version.bind/TXT/CHAOS
> Has someone any idea why this query was sent to my DNS server? Should I be
> worried about it?
> --
> Vik
+----------------------------------------------------------------+
| James W. Laferriere | System Techniques | Give me VMS |
| Network Engineer | 25416 22nd So | Give me Linux |
| babydr at baby-dragons.com | DesMoines WA 98198 | only on AXP |
+----------------------------------------------------------------+
More information about the bind-users
mailing list