Re: Three NameServer DOSing my

2010-07-29 Thread Dave Sparro
On 7/29/2010 2:11 PM, Michelle Konzack wrote: Hello Matus UHLAR - fantomas, Your hostname is private and inaccessible from the outside. The requesters get SERVFAIL reply which apparently makes them retry. If you provided them any IP address (e.g. 127.0.0.1) they could be satisfied and stop try

Re: Three NameServer DOSing my

2010-07-29 Thread Michelle Konzack
Hello Matus UHLAR - fantomas, Am 2010-07-29 19:37:50, hacktest Du folgendes herunter: > apparently internal_networks set up incorrectly? No it is the problem if a customer connect trough a VPN to the Router of the employer/enterprise and send out messages using the the companys own mail relay and

Re: Three NameServer DOSing my

2010-07-29 Thread Matus UHLAR - fantomas
> Am 2010-07-29 14:12:54, hacktest Du folgendes herunter: > > On 28.07.10 23:24, Michelle Konzack wrote: > > > But why do they query my server 3 times per second? > Hello Matus UHLAR - fantomas, > > deep parsing of e-mail headers by spam filtering software, I guess. On 29.07.10 19:16, Michelle Ko

Re: Three NameServer DOSing my

2010-07-29 Thread Michelle Konzack
Hello Matus UHLAR - fantomas, Am 2010-07-29 14:12:54, hacktest Du folgendes herunter: > On 28.07.10 23:24, Michelle Konzack wrote: > > But why do they query my server 3 times per second? > deep parsing of e-mail headers by spam filtering software, I guess. Which is the last crap! Spamassassin do

Re: Three NameServer DOSing my

2010-07-29 Thread Matus UHLAR - fantomas
> Hello Dave Sparro, > > Am 2010-07-28 10:11:52, hacktest Du folgendes herunter: > > That host name does show up in your e-mail headers. That may > > be why there are some people curious about that host name. On 28.07.10 23:24, Michelle Konzack wrote: > But why do they query my server 3 times pe

Re: Three NameServer DOSing my

2010-07-28 Thread Michelle Konzack
Hello Dave Sparro, Am 2010-07-28 10:11:52, hacktest Du folgendes herunter: > That host name does show up in your e-mail headers. That may > be why there are some people curious about that host name. But why do they query my server 3 times per second? Currently I have more then 600.000 DNS requ

Re: Three NameServer DOSing my

2010-07-28 Thread Dave Sparro
On 7/28/2010 5:53 AM, Michelle Konzack wrote: Hello Experts, my primary NameServer is hit by more then 600.000 requests per day coming mainly from three NameServers: [ '/var/log/named.log' ] Jul 28 11:18:17 samba3 named[26425]: 28-Jul-2010 11:18:

Three NameServer DOSing my

2010-07-28 Thread Michelle Konzack
Hello Experts, my primary NameServer is hit by more then 600.000 requests per day coming mainly from three NameServers: [ '/var/log/named.log' ] Jul 28 11:18:17 samba3 named[26425]: 28-Jul-2010 11:18:17.318 security: info: client 194.25.2.173#3445