CHAOS version.bind

[Joseph S D Yao]

On Sat, Jan 27, 2001 at 11:33:45AM +0000, Vik Heyndrickx wrote:
> In my newly set-up DNS server which is the SOA for some public IN domains, I
> found the following line in the logging of bind (named):
> 
> XX+/212.68.193.196/version.bind/TXT/CHAOS
> 
> Has someone any idea why this query was sent to my DNS server? Should I be
> worried about it?

Probing for your version may be innocent, or it may be seeing how you
are vulnerable.  Protect yourself by upgrading to BIND 8.2.3 [newly off
beta] or 9.1.0.

-- 
Joe Yao				jsdy at cospo.osis.gov - Joseph S. D. Yao
COSPO/OSIS Computer Support					EMT-B
-----------------------------------------------------------------------
This message is not an official statement of COSPO policies.