denied query on bind

ChrisC chris at issolutions.co.uk
Thu Oct 2 15:25:50 UTC 2003


Mark_Andrews at isc.org wrote in message news:<bladft$e25$1 at sf1.isc.org>...
> > ChrisC <chris at issolutions.co.uk> wrote:
> > > Hi,
> > > Im running bind 8.2.4 on solaris 9. My messages /log files are
> > > constantly fillling up with 'denied query' from various ip addresses
> > > to the following
>  
> > > denied query from [206.222.107.70].53 for
> > > "82.80/28.192.147.12.in-addr.arpa
> > > " IN Sep 13 08:17:54 
>  
> > > The ip address looks strange and I havnt seen it before, Im trying to
> > > find out why Im constantly getting queries for this, could someone
> > > give me a clue??
>  
> > > Thanks
> > 
> > The range _is_ assigned to :
> > 80/28.192.147.12.in-addr.arpa.  1d23h58m8s IN NS  percy.issolutions.co.uk.
> > 80/28.192.147.12.in-addr.arpa.  1d23h58m8s IN NS  ns2.toshiba-europe.com.
> > 
> > which might indicate that one of your clients uses this address for outbound 
> > use. 
> > Servers "out there" tries to query the nameservers ( and get's refused)
> > 
> > If you use these addresses you are supposed to present working servers.
> 
> 	And the fix for this is to add
> 
> 	allow-query { any; };
> 
> 	to the zone clause for 80/28.192.147.12.in-addr.arpa
> 
> 	You should also allo percy.issolutions.co.uk to transfer
> 	the zone as it is a slave. 
> 
> 	allow-transfer { 193.129.122.21; };
>  
> > 
> > -- 
> > Peter Håkanson         
> >         IPSec  Sverige      ( At Gothenburg Riverside )
> >            Sorry about my e-mail address, but i'm trying to keep spam out,
> > 	   remove "icke-reklam" if you feel for mailing me. Thanx.
> >


Hi All,

Thankyou for the input, Im very confused about the address
80/28.192.147.12.in-addr.arpa, could someone tell me how they found
out (ie what tool) it is allocated to percy and ns2 ? Ive looked on
ripe and cant find it, also how can we see who assigned those
addresses ? What is the 80/28 bit at the beginning?

Thanks


More information about the bind-users mailing list