BIND unappproved updates

[Acacio Cruz]

Thomas Kellar wrote:

> Can anyone give any helpful answers:
>
> I have been receiving upapproved updates from a IP on concentric.net, now
> xo.com and have been unable to get them to stop.  I have emailed
> abuse at xo.com, (3X) abuse at concentric.net,postmaster at speerfulvio.com and my
> ISP has done the same. They (xo) list a telephone number to call but
> suggest not calling it.  This is BIND related because this seems to be a
> misconfigured computer and BIND is distributed widely over Internet and
> subject to misconfigured computers everywhere.  This is not the only IP
> address I get unapproved updates from.  There is a cable modem that sends
> them every so often too.  Does anyone have any idea what sort of
> misconfiguration would cause someone to update my domain of fsp.com? It
> does not look like a Win2K computer but what else does pcanywhere run on?

This is typical of W2K workstations with the update feature enabled (the default).
I have scores of users like that every week.

-Acacio