Re: Strange DNS request



Thanks for the valuable info

Jorge



-----Mensaje original-----
De: IBM AIX Discussion List [mailto:aix-l@xxxxxxxxxxxxx] En nombre de
Lamar Saxon
Enviado el: Viernes, 17 de Noviembre de 2006 11:29
Para: aix-l@xxxxxxxxxxxxx
Asunto: Re: Strange DNS request

Or the BIND home @

www.isc.org


Lamar

-----Original Message-----
From: IBM AIX Discussion List [mailto:aix-l@xxxxxxxxxxxxx] On Behalf Of
Barry Finkel
Sent: Friday, November 17, 2006 7:27 AM
To: aix-l@xxxxxxxxxxxxx
Subject: Re: Strange DNS request

With respect to BIND and AD - Check the archives of the list

bind-users@xxxxxxx

at this URL:

http://marc.theaimsgroup.com/?l=bind-users

I have used BIND 8 and BIND 9 (on Solaris, not AIX) to slave the AD
zones from a MS W2k (and now W2003) DNS Server. I do not allow DDNS on
my BIND servers, so machine registrations are static and manual.
I do have one forward zone and its five Class-C reverse zones mastered
on a MS W2003 DNS Server (under the control of MS DHCP) and slaved on my
BIND servers. We do not use MS multi-master; we have three DCs, and DNS
runs on ONLY ONE. See MS KB article 282826 for more details on the
serial number problems that probably will arise with multi-master.

Any BIND 8 or BIND 9 will support the SRV records.
----------------------------------------------------------------------
Barry S. Finkel
Computing and Information Systems Division
Argonne National Laboratory Phone: +1 (630) 252-7277
9700 South Cass Avenue Facsimile:+1 (630) 252-4601
Building 222, Room D209 Internet: BSFinkel@xxxxxxx
Argonne, IL 60439-4828 IBMMAIL: I1004994



Privileged and Confidential. This e-mail, and any attachments there to,
is intended only for use by the addressee(s) named herein and may
contain privileged or confidential information. If you have received
this e-mail in error, please notify me immediately by a return e-mail
and delete this e-mail. You are hereby notified that any dissemination,
distribution or copying of this e-mail and/or any attachments thereto,
is strictly prohibited.


---COTO CICSA--------------------------------------------------------
Este mensaje es estrictamente confidencial. Puede contener información amparada y protegida por el secreto profesional. Si Ud. ha recibido este mensaje por error, por favor reenvíelo inmediatamente a postmaster@xxxxxxxxxxx y elimínelo permanentemente de su sistema. El contenido de este mensaje no puede ser copiado ni divulgado a ninguna persona. Muchas gracias.
---COTO CICSA--------------------------------------------------------
This message is strictly confidential. It may also be privileged or otherwise protected by other legal rules. If you have mistakenly received this message, please notify us by forwarding it to postmaster@xxxxxxxxxxx and then delete it permanently from your system. This message should not be copied or its contents disclosed to anyone. Thank you.
---COTO CICSA--------------------------------------------------------

Relevant Pages

  • Re: Strange DNS request
    ... Barry Finkel ... With respect to BIND and AD - Check the archives of the list ... zones from a MS W2k DNS Server. ... mastered on a MS W2003 DNS Server ...
    (AIX-L)
  • [UNIX] Hardening the BIND DNS Server
    ... Hardening the BIND DNS Server ... Your Domain Name Service is the road sign to your systems on the Internet. ...
    (Securiteam)
  • Re: Local DNS Caching not caching on external interface
    ... I have just configured a Local DNS server using the built-in ... Bind 9.3.1 on a FreeBSD 5.4 machine. ... seem to query the caching name server from my local network. ...
    (freebsd-questions)
  • Re: Chroot Debian
    ... Why is a DNS server such a security risk that it should be run ... There's a long history of bugs and security compromises with BIND. ... The reason for the chroot configuration, though, is a ... As for what 'sploits there are, Googling "bind vulnerability OR ...
    (Debian-User)
  • Re: Observation on FC2/Help on FC1
    ... patience now to wrap all lines so that a proper quoting is possible] ... If you only run a bind DNS server on the suspicious FC1 host, ... You should that see from the logs. ...
    (Fedora)