[Sussex] DNS Hack attack?
Macdonald-Wallace, Matthew J
s0209208 at glos.ac.uk
Mon Nov 11 18:10:01 UTC 2002
All,
Anyone know what the following mean? I've been mailed it by a friend who
doesn't understand his DNS logs. Neither do I! :o)
All answers on a postcard please no later than... ;o)
TIA,
Matt
-----
These are entries in my message log. Could any one comment on the meaning of
"dangling CNAME ...", don't know any such addresses (a3.x... or gd15....)
Am I being hacked? If so, what would it be the best way to block such
attack?
Hope I'm only paranoid.
Thanks, Mario.
Nov 11 10:16:05 ns inetd[485]: auth/tcp: bind: Address already in use
Nov 11 10:23:26 ns named[517]: dangling CNAME pointer (a3.x.a.yimg.com)
Nov 11 10:23:27 ns named[517]: dangling CNAME pointer (a3.x.a.yimg.com)
Nov 11 10:26:05 ns inetd[485]: auth/tcp: bind: Address already in use
Nov 11 10:26:24 ns named[517]: dangling CNAME pointer (gd15.doubleclick.net)
Nov 11 10:26:25 ns named[517]: dangling CNAME pointer (gd15.doubleclick.net)
Nov 11 10:34:01 ns gpm[615]: No data
Nov 11 10:36:05 ns inetd[485]: auth/tcp: bind: Address already in use
____ ? The WDVL Discussion List from WDVL.COM ? ____
To Join wdvltalk, Send An Email To: mailto:wdvltalk-join at lists.wdvl.com
Send Your Posts To: wdvltalk at lists.wdvl.com
To change subscription settings to the wdvltalk digest version:
http://wdvl.internet.com/WDVL/Forum/#sub
________________ http://www.wdvl.com _______________________
You are currently subscribed to wdvltalk as: s0209208 at glos.ac.uk
To unsubscribe send a blank email to leave-wdvltalk-162877L at lists.wdvl.com
More information about the Sussex
mailing list