Bogus LOOPBACK A RR {Scanned}

SW wppiphoto at wppi.com
Sun Mar 20 16:32:56 UTC 2005


Hi,

I just found something very concerning in my log files whereby my primary 
name server seems to have added a loopback (localhost) address which is NOT 
owned by us. Can someone please tell me more details on what the following 
lines mean and if I should be concerned with it:

ns_forw: query(29.192.115.200.IN-ADDR.ARPA) Bogus LOOPBACK A RR 
(localhost:127.0.0.1) learnt (A=localhost:NS=200.115.192.29): 1 Time(s)
ns_forw: query(29.192.115.200.IN-ADDR.ARPA) No possible A/AAAA RRs: 1 
Time(s)

And more important how to prevent my name servers from allowing outsiders to 
add localhost records to my servers?

Thanks,

SW 



-------------------------------------------------
        WPPi.com        |        WPPi.Net
-------------------------------------------------
  http://www.wppi.com   |  http://www.wppi.net
-------------------------------------------------
WPPi.com & WPPi.Net MailScanner Signature
This message has been scanned for viruses
and dangerous content by WPPi MailScanner,
and has been found to be clean.
-------------------------------------------------




More information about the bind-users mailing list