question unapproved

[Kevin Darcy]

Allan T. Parreno wrote:

> Thanks guys for responding my queries, but i still have one question to
> clarify, meaning the 202.134.231.10 is pointing to my DNS server as their
> NS server? is that correct?

Maybe, maybe not. Is your server a delegated authority for
GOTHIC.marista.nddc.edu.ph or any of its ancestor domains? If so, then you
shouldn't be restricting queries across the board.

The fact that the offending address is quite close to the permitted range,
however, leads one to believe that someone at your site or on your intranet
has pointed a stub resolver or forwarding nameserver at your nameserver
without your knowledge and/or consent.


- Kevin

> - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
> a l l a n  t.  p a r r e n o                       =20
> Onevirtual Internet - Iloilo                      =20
> -
> I always knew looking back on my tears would make me laugh, but I never
> knew looking back on my laughter would make me cry
>
> On Wed, 15 Nov 2000, Mathias K=F6rber wrote:
>
> > > Would like to ask about this error message in my log file after I add
> > > allow-query {202.134.244.0/24;}; in my named.conf file.
> > >=20
> > > Nov 15 15:08:58 sun1 named[1366]: unapproved query from
> > > [202.134.231.10].62376 for "GOTHIC.marista.nddc.edu.ph"
> > > thanks.
> >=20
> > It measexactly what it says. A system with IP address
> > 203.134.231.10 tries querying your server for the record
> > indicated. As that IP address is not in the IP block you
> > allowed queries to, it was rejected.
> >=20
> > regards
> >=20