Re: Bind report

From: Barry Margolin (barry.margolin@level3.com)
Date: 03/21/03 

From: Barry Margolin <barry.margolin@level3.com>
Date: Fri, 21 Mar 2003 16:22:56 GMT

In article <newscache$lza3ch$917$1@frodo.fserver.locale>,
Giovanni <gcasanoNOSPAM@freemail.it> wrote:
>Hi,
>
>it is since a couple of days I find the following lines in my dns server:
>
>Mar 21 05:36:50 dns named[23984]: client yyy#65169: updating
>zone 'xxx.com/IN': update failed: 'RRset exists (value dependent)'
> prerequisite not satisfied (NXRRSET)
>
>Mar 21 05:36:50 dns named[23984]: client yyy#65365: update 'xxx.com/IN' denied
>
>I think there is a client on the internet trying to update my dns zone files
>without permission: is it right?

It looks to me like the update access list has passed them through. The
error message is reporting that there was a problem performing the update
that they requested -- it included a prerequisite, but it wasn't satisfied.

I suggest you check the "allow-update" statement in your named.conf file to
make sure it only allows updates from authorized clients. 

-- 
Barry Margolin, barry.margolin@level3.com
Genuity Managed Services, Woburn, MA
*** DON'T SEND TECHNICAL QUESTIONS DIRECTLY TO ME, post them to newsgroups.
Please DON'T copy followups to me -- I'll assume it wasn't posted to the group.

Relevant Pages

  • Re: UDP session tracking problem
    ... > resolve names only for authorized clients. ... > The clients are behind a router/firewall and the DNS server is on the ... treat it as a locally controlled resource on the router/firewall thats doing ...
    (comp.os.linux.networking)
  • Bind report
    ... it is since a couple of days I find the following lines in my dns server: ... zone 'xxx.com/IN': update failed: 'RRset exists ' ... prerequisite not satisfied ... I think there is a client on the internet trying to update my dns zone files ...
    (comp.security.unix)