[Sussex] DNS Hack attack?

Macdonald-Wallace, Matthew J s0209208 at glos.ac.uk
Mon Nov 11 18:10:01 UTC 2002


All,

Anyone know what the following mean? I've been mailed it by a friend who
doesn't understand his DNS logs.  Neither do I! :o)

All answers on a postcard please no later than... ;o)

TIA,

Matt

-----
These are entries in my message log. Could any one comment on the meaning of

"dangling CNAME ...",  don't know any such addresses (a3.x... or gd15....)
Am I being hacked? If so, what would it be the best way to block such
attack?
Hope I'm only paranoid.

Thanks, Mario.


Nov 11 10:16:05 ns inetd[485]: auth/tcp: bind: Address already in use
Nov 11 10:23:26 ns named[517]: dangling CNAME pointer (a3.x.a.yimg.com)
Nov 11 10:23:27 ns named[517]: dangling CNAME pointer (a3.x.a.yimg.com)
Nov 11 10:26:05 ns inetd[485]: auth/tcp: bind: Address already in use
Nov 11 10:26:24 ns named[517]: dangling CNAME pointer (gd15.doubleclick.net)
Nov 11 10:26:25 ns named[517]: dangling CNAME pointer (gd15.doubleclick.net)
Nov 11 10:34:01 ns gpm[615]: No data
Nov 11 10:36:05 ns inetd[485]: auth/tcp: bind: Address already in use


____ ? The WDVL Discussion List from WDVL.COM ? ____
To Join wdvltalk, Send An Email To: mailto:wdvltalk-join at lists.wdvl.com 
       Send Your Posts To: wdvltalk at lists.wdvl.com
To change subscription settings to the wdvltalk digest version:
    http://wdvl.internet.com/WDVL/Forum/#sub

________________  http://www.wdvl.com  _______________________

You are currently subscribed to wdvltalk as: s0209208 at glos.ac.uk
To unsubscribe send a blank email to leave-wdvltalk-162877L at lists.wdvl.com




More information about the Sussex mailing list