strange logs

[Tim Wilde]

On Sat, 26 Jun 2004, Michael Sharp wrote:

> I've noticed this the past few weeks in /var/log/messages:
>
> Jun 24 15:45:06 darken named[232]: client 66.98.244.52#1039: zone transfer
> 'coastal-law.org/IN' denied
> Jun 24 15:47:10 darken named[232]: client 66.98.244.52#1039: zone transfer
> 'cherrypointyoungmarines.org/IN' denied
> Jun 24 16:45:06 darken named[232]: client 66.98.244.52#1039: zone transfer
> 'coastal-law.org/IN' denied
> Jun 24 16:47:10 darken named[232]: client 66.98.244.52#1039: zone transfer
> 'cherrypointyoungmarines.org/IN' denied

http://66.98.244.52/ takes you to a page that links to secondary.org,
which states:

The primary DNS listed here should accept zone transfers from
66.98.244.118 and 66.98.244.52

So it's probably pretty safe to say that someone's put your domain(s) in
secondary.org.  Try contacting them (secondary at consumer.net on the site)
for help getting them removed.

-- 
Tim Wilde
twilde at dyndns.org
Systems Administrator
Dynamic Network Services, Inc.
http://www.dyndns.org/