Named errors - ReadList.com

6 msg	Question on global settings in named.conf
6 msg	FORMERR Messages in BIND 9.3.2
2 msg	Query logging issue?
1 msg	is there any one using DLZ extension to BIND
2 msg	forward DNS query for certain entries in certai...
4 msg	Need help with bind on suse 8.
2 msg	linux bind replica of primary DNS
4 msg	Win2K3-AD Master - Bind Slave transfers fail
2 msg	Wrong zone file..
2 msg	Help me Solving two problems pls
2 msg	BIND & forwarding zone / proxy - HOW???
3 msg	Running multiple websites from different domain...
2 msg	Strange state of bind
4 msg	Compiling Bind 9.3.2 on Solaris 10
2 msg	'include'ing all files in a directory - has thi...
2 msg	out of memory and server fail!
1 msg	RE: Bind CPU usage issue
6 msg	Do I need TSIG for zone transfer on an intranet...
5 msg	Bind CPU ussage issue

Named errors
\ Gary Lopez (27 Jun 2006)
. \ Kevin Darcy (28 Jun 2006)
. . \ Gary Lopez (28 Jun 2006)
. \ Jeff Lightner (28 Jun 2006)
. \ Gregory Hicks (28 Jun 2006)
. \ Barry Margolin (28 Jun 2006)
. . \ Gary Lopez (29 Jun 2006)
. . \ David Miller (30 Jun 2006)
. \ Jeff Lightner (30 Jun 2006)

Subject:	Named errors
Group:	Bind-users
From:	Gary Lopez
Date:	27 Jun 2006

Hello everyone,
This problem started over the weekend and not sure why. I have been
running the same version of bind 8.1.2 on Solaris 2.7 for the past 4
years without incident. Since this weekend however I started seeing
error messages about wrong ans. name and bad referrals. Is this an
attack or is there something in my bind configuration I need to modify?

example:

Jun 27 07:21:40 named[11645]: bad referral (. !< pebble.com)
Jun 27 07:21:40 DNS-server named[11645]: bad referral
(169.218.in-addr.arpa !< 87.169.218.in-addr.arpa)
Jun 27 07:21:40 DNS-server last message repeated 1 time
Jun 27 07:21:51 DNS-server named[11645]: wrong ans. name
(g.www.ms.akadns.net != toggle.www.ms.akadns.net)
Jun 27 07:21:51 DNS-server named[11645]: wrong ans. name
(lb1.www.ms.akadns.net != toggle.www.ms.akadns.net)
Jun 27 07:21:51 DNS-server last message repeated 5 times
Jun 27 07:21:51 DNS-server named[11645]: wrong ans. name
(lb1.www.ms.akadns.net != g.www.ms.akadns.net)
Jun 27 07:21:51 DNS-server last message repeated 3 times
Jun 27 07:22:09 DNS-server named[11645]: bad referral (. !< sandgrabber.com)

--
Gary D Lopez
Unix Systems Administrator
Catapult Communications
160 S Whisman Rd
Mountain View, CA 94041
Ph (650) 314-1029
Fax (650) 960-1029