invalid requests for dns_registration.*

Barry Margolin barmar at alum.mit.edu
Tue Mar 30 01:55:58 UTC 2010


In article <mailman.974.1269852204.21153.bind-users at lists.isc.org>,
 Matus UHLAR - fantomas <uhlar at fantomas.sk> wrote:

> Hello,
> 
> on one of my nameservers I see many of these messages in log files:
> 
> Mar 29 07:59:07 gtssk1 named[5012]: security: error: client
> 195.168.29.200#65293: view gtsi: check-names failure
> dns_registration.in.nextra.sk/A/IN
> 
> I'm curious of the reason because they are going to sevrer authoritative for
> nextra.sk, but not for in.nextra.sk, so I think there's a broken DNS
> resolver/updater somewhere.

If the client doesn't have NS records cached for in.nextra.sk, it will 
ask the servers for nextra.sk, which should return a delegation.

> Has anyone an idea what kind of devices or cofnigurations can issue these
> requests?

Any properly functioning DNS resolver.  There's nothing wrong with the 
requests.  What's wrong is that your subdomain has a hostname with an 
underscore in its name.

-- 
Barry Margolin, barmar at alum.mit.edu
Arlington, MA
*** PLEASE don't copy me on replies, I'll read them in the group ***



More information about the bind-users mailing list