I kept seeing things in the logs like Se ... / 2007-09-16

2007-09-16 I kept seeing things in the logs like Se ...
Attention: this item is more than 5 years old, links can be broken and information can have been updated.
I kept seeing things in the logs like Sep 16 05:52:39 gosper named[779]: denied query from [].22632 for "www.capitalone.com" A/IN, all from,, without any explanation to be found on the web. The name guesses some sort of study of DNS answers, and all queries seem to be for phishing targets, but several thousand answers "your query was denied" doesn't make them stop asking. Solution: iptables -t filter -I INPUT 8 -j REJECT --source --protocol udp --dport 53 --reject-with icmp-admin-prohibited. Mail to noc@ was never answered.

Tags: , ,

IPv6 check

Running test...
, reachable as koos+website@idefix.net. PGP encrypted e-mail preferred. PGP key 5BA9 368B E6F3 34E4 local copy PGP key 5BA9 368B E6F3 34E4 via keyservers

Meningen zijn die van mezelf, wat ik schrijf is beschermd door auteursrecht. Sommige publicaties bevatten een expliciete vermelding dat ze ongevraagd gedeeld mogen worden.
My opinions are my own, what I write is protected by copyrights. Some publications contain an explicit license statement which allows sharing without asking permission.
Other webprojects: Camp Wireless, wireless Internet access at campsites
This page generated by $Id: newsitem.cgi,v 1.62 2023/09/19 14:49:50 koos Exp $ in 0.009027 seconds.