Re: Something new? bind dos? exploit?

jlewis_at_lewis.org
Date: 02/14/04

  • Next message: Frank Knobbe: "Re: WebDav Worm?" 
    Date: Fri, 13 Feb 2004 23:04:55 -0500 (EST)
To: Chip Mefford <cmefford@avwashington.com>

    On Fri, 13 Feb 2004, Chip Mefford wrote:

    > Feb 13 06:55:40 hostname named[12631]: socket.c:1100: unexpected error:
    > Feb 13 06:55:40 hostname named[12631]: internal_send:
    > 244.254.254.254#53: Invalid argument

    This has made the rounds on several other lists already. It's just RFG's
    way of telling people to stop trying to use several DNSBLs he shut down
    some time ago.

    $ dig @ns4.monkeys.com. relays.monkeys.com ns
     
    ; <<>> DiG 9.2.1 <<>> @ns4.monkeys.com. relays.monkeys.com ns
    ;; global options: printcmd
    ;; Got answer:
    ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 31620
    ;; flags: qr rd; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1
     
    ;; QUESTION SECTION:
    ;relays.monkeys.com. IN NS
     
    ;; ANSWER SECTION:
    relays.monkeys.com. 86400 IN NS bogus-maximus.monkeys.com.
     
    ;; ADDITIONAL SECTION:
    bogus-maximus.monkeys.com. 86400 IN A 244.254.254.254
     
    ;; Query time: 1106 msec
    ;; SERVER: 66.60.159.24#53(ns4.monkeys.com.)
    ;; WHEN: Fri Feb 13 23:16:34 2004
    ;; MSG SIZE rcvd: 80

    ----------------------------------------------------------------------
     Jon Lewis *jlewis@lewis.org*| I route
     Senior Network Engineer | therefore you are
     Atlantic Net |
    _________ http://www.lewis.org/~jlewis/pgp for PGP public key_________

    ---------------------------------------------------------------------------
    Free trial: Astaro Security Linux -- firewall with Spam/Virus Protection

    Protect your network with the comprehensive security solution that
    integrates six applications for ease of use and lower TCO.

    Firewall - Virus protection - Spam protection - URL blocking - VPN
    - Wireless security.

    Download 30-day evaluation at:
    http://www.astaro.com/php/contact/securityfocus.php
    ----------------------------------------------------------------------------

  • Next message: Frank Knobbe: "Re: WebDav Worm?"

    Relevant Pages

    • Senior Network Engineer - Norcross, Ga
      ... Reports To Director ... Department CS-Infrastructure & Security ... This role is to manager, design, implement, troubleshooting large, ... The Senior Network Engineer will ...
      (comp.dcom.sys.cisco)
    • RE: WebDav Worm?
      ... I've seen the exact same pattern from 7 different source IPs in the ... All source IPs appear to be DSL or cable modem, ... Astaro Security Linux -- firewall with Spam/Virus Protection ...
      (Incidents)
    • RE: Life After CISSP?
      ... Subject: Life After CISSP? ... The contents of this email and any attachments to it may contain ... Astaro Security Linux -- firewall with Spam/Virus Protection ...
      (Security-Basics)
    • Re: pen testing & obfuscated shell code
      ... sleds) is that there are at least 2 ways of producing the same opcodes on Intel systems. ... Astaro Security Linux -- firewall with Spam/Virus Protection ...
      (Pen-Test)
    • RE: Preventing OS Detection
      ... Once you've gotten your network packets tweaked so ... If I go to http://uptime.netcraft.com and enter my website, ... Astaro Security Linux -- firewall with Spam/Virus Protection ...
      (Focus-Microsoft)