Subject: Re: Questionable entry in /var/log/messages
To: Beaker \(aka Jeff W\) <beaker@myrealbox.com>
From: Andrew Brown <atatat@atatdot.net>
List: netbsd-users
Date: 12/29/2002 13:58:05
>Found the following in /var/log/messages:
>---
>Dec 26 19:00:30 bsdbox inetd[12426]: warning: can't verify hostname:
>gethostbyname2(melinet.maich.gr.36.218.193.in-addr.arpa, 2) failed
>---
>
>Is this an attempted break-in?
in this case it looks like the case of the admin who made a mistake
and left the trailing dot off a record in the reverse zone file.
193.218.36.5 maps to melinet.maich.gr.36.218.193.in-addr.arpa, which
should probably be simply melinet.maich.gr, which maps to
193.218.36.5.
--
|-----< "CODE WARRIOR" >-----|
codewarrior@daemon.org * "ah! i see you have the internet
twofsonet@graffiti.com (Andrew Brown) that goes *ping*!"
werdna@squooshy.com * "information is power -- share the wealth."