Syslog..

[Barry Margolin]

In article <019201bf1529$61b111a0$24db3fcb at cia.com.au>,
Marc-Adrian Napoli <marcadrian at cia.com.au> wrote:
>Hi everyone,
>
>Just two quickies.
>
>I found these in syslog and was just wondering what they were.
>
>Oct 13 08:34:09 newmi5 named[17540]: bad referral (. !< 800GO.com)

You asked one of the registered servers for the 800go.com domain for
something in the domain.  In the response, it included the following
in the response (in addition to 

;; AUTHORITY RECORDS:
..	0	NS	.

;; ADDITIONAL RECORDS:
..	0	A	0.0.0.0

The authoritative server for a domain should never include a referral up
the hierarchy.

>
>and
>
>Oct 12 23:41:14 newmi5 named[17540]: ns_req: sendto([158.177.32.1].53):
>Connection refused

Your server tried to send a query to 158.177.32.1, but the server wasn't
running on that machine at the time.  This looks like a transient problem,
as it's running now.

>These lines have only been really coming up since I blocked zone transfers
>to the world. (After realising the default for BIND was to allow zone
>transfers to anyone)..

I think that's coincidental.

-- 
Barry Margolin, barmar at bbnplanet.com
GTE Internetworking, Powered by BBN, Burlington, MA
*** DON'T SEND TECHNICAL QUESTIONS DIRECTLY TO ME, post them to newsgroups.
Please DON'T copy followups to me -- I'll assume it wasn't posted to the group.