Unapproved updates

ray at doubleclick.net ray at doubleclick.net
Fri Sep 15 22:33:30 UTC 2000


On Fri, 15 Sep 2000, Ali Eghtessadi wrote:

> What does the following messages in the syslog mean and what causes it?
> 
> Thanks for your help.
> Ali
> 
> Sep 14 06:28:09 alcatraz named[108]: unapproved update from
> [64.20.39.112].1084 for babcockbrown.com

likely you have some users running Windows 2000 systems, which will
attempt to register themselves via `nsupdate` to whatever nameserver
is listed as primary in the SOA. You can either convince your users to
disabled dynamic updates via a procedure which was previously posted
here, or put something like "localhost.babcockbrown.com" in your SOA
record, such that attempts to nsupdate will fail. Naturally this can
break things if you rely on the NOTIFY facility but it's an option
nonetheless.

I'll copy the procedure to you for disabling Win2K nsupdate privately.

--
Ray




More information about the bind-users mailing list