Jim Perrin wrote:
>On 12/6/05, Sam Drinkard <sam@xxxxxxxxxx> wrote:
>
>
>>Found this entry in the log this morning. Never have seen such
>>before.......
>>
>> --------------------- Named Begin ------------------------
>>
>>
>>**Unmatched Entries**
>> dispatch 0x8ea6e48: shutting down due to TCP receive error: connection reset: 1 Time(s)
>>
>> ---------------------- Named End -------------------------
>>
>>
>>As I understand it, this is caused by named being fed bad packets,
>>either by some form of automated attack, or crappy dns server that
>>named queried on its way to find out what you asked it for. Depending
>>on the verbosity of the named logs you keep, you could grep this out,
>>and look at the queries near it to see if there's a particular cause.
>>Or it may not be worth it to you
>>
>>
I've been getting these lately too...on servers in the
US/China/Australia. So I suspect it's another idiotic scriptkiddie attack.
Cheers,
