named crashes (with nothing written to log?)

[tmaestas at dnsconsultants.com]

	These messages are your Windows 2000 machine attempting
	to update your BIND server with it's PTR record.  This
	is probably not the cause of your crash.  You neglected 
	to mention what version of BIND you are running.  If you
	are running a verision < 8.2.3 then it is likely your
	server is being crashed by a remote attack.

-Tim

On Tue, 3 Apr 2001, Studio 51 wrote:

> On an almost daily (but seemingly random) basis named crashes. The process
> just magically disappears, and I can't find anything written to the log. I'm
> not sure where the log is though, does it use syslogd? The only thing I
> could find was in daemon.log and syslog:
> 
> Apr  3 10:46:16 cr576127-a named[2480]: unapproved update from
> [192.168.0.3].1048 for cr576127-a.ym1.on.wave.home.com
> Apr  3 10:46:16 cr576127-a named[2480]: unapproved update from
> [192.168.0.3].1048 for cr576127-a.ym1.on.wave.home.com
> Apr  3 10:46:16 cr576127-a named[2480]: unapproved update from
> [192.168.0.3].1053 for 0.168.192.in-addr.arpa
> Apr  3 10:46:16 cr576127-a named[2480]: unapproved update from
> [192.168.0.3].1048 for cr576127-a.ym1.on.wave.home.com
> Apr  3 10:46:16 cr576127-a named[2480]: unapproved update from
> [192.168.0.3].1053 for 0.168.192.in-addr.arpa
> Apr  3 10:46:16 cr576127-a named[2480]: unapproved update from
> [192.168.0.3].1053 for 0.168.192.in-addr.arpa
> 
> 
> What does that mean? And could it be related to the crash? It's quite
> annoying, my DNS will suddenly go down and I have to go restart. WHen I do,
> everything works fine until about 24-48 hours later it goes down again.
> 
> Note that the hostname has been altered because I don't want to post it to
> usenet.
> 
> 
> LKembel
> 
>