I kept seeing things in the logs like Se ... / 2007-09-16

2007-09-16 I kept seeing things in the logs like Se ... 11 years ago
I kept seeing things in the logs like Sep 16 05:52:39 gosper named[779]: denied query from [143.215.129.200].22632 for "www.capitalone.com" A/IN, all from 143.215.129.200, 143.215.129.102, 143.215.129.43 without any explanation to be found on the web. The name guesses some sort of study of DNS answers, and all queries seem to be for phishing targets, but several thousand answers "your query was denied" doesn't make them stop asking. Solution: iptables -t filter -I INPUT 8 -j REJECT --source 143.215.129.0/24 --protocol udp --dport 53 --reject-with icmp-admin-prohibited. Mail to noc@ was never answered.

Tags: , ,

, reachable as koos+website@idefix.net. PGP encrypted e-mail preferred.

PGP key 5BA9 368B E6F3 34E4 local copy PGP key 5BA9 368B E6F3 34E4 via keyservers pgp key statistics for 0x5BA9368BE6F334E4 Koos van den Hout
RSS
Other webprojects: Camp Wireless, wireless Internet access at campsites, The Virtual Bookcase, book reviews
This page generated in 0.003878 seconds.