Thread Info
  • State Not Answered
  • Replies 5 replies
  • Subscribers 0 subscribers
  • Views 1335 views
  • Users 0 members are here
Options
Suggested

[7.480][QUESTION][OPEN] DNS requests when no active users

BAlfson
Presently, I am the only one on our ASG220 test machine.  I just got this from the DNS log: 
2009:08:12-13:55:15 testmediasoftusa-1 named[3839]: FORMERR resolving 'resolver.1.geo.ctmail.com/AAAA/IN': 64.191.223.33#53

2009:08:12-13:55:15 testmediasoftusa-1 named[3839]: FORMERR resolving 'resolver.1.geo.ctmail.com/AAAA/IN': 65.74.168.211#53

2009:08:12-13:55:15 testmediasoftusa-1 named[3839]: FORMERR resolving 'resolver.1.geo.ctmail.com/AAAA/IN': 208.50.223.241#53

2009:08:12-13:55:16 testmediasoftusa-1 named[3839]: FORMERR resolving 'resolver.1.geo.ctmail.com/AAAA/IN': 116.92.1.84#53

2009:08:12-13:55:16 testmediasoftusa-1 named[3839]: too many timeouts resolving 'resolver.1.geo.ctmail.com/AAAA' (in 'geo.ctmail.com'?): disabling EDNS

2009:08:12-13:55:17 testmediasoftusa-1 named[3839]: too many timeouts resolving 'resolver.1.geo.ctmail.com/AAAA' (in 'geo.ctmail.com'?): disabling EDNS

2009:08:12-13:55:19 testmediasoftusa-1 named[3839]: too many timeouts resolving 'resolver.1.geo.ctmail.com/AAAA' (in 'geo.ctmail.com'?): disabling EDNS

2009:08:12-13:55:20 testmediasoftusa-1 named[3839]: unexpected RCODE (SERVFAIL) resolving 'resolver.1.geo.ctmail.com/AAAA/IN': X.X.0.7#53

2009:08:12-13:55:22 testmediasoftusa-1 named[3839]: FORMERR resolving 'resolver.2.geo.ctmail.com/AAAA/IN': 64.191.223.33#53

2009:08:12-13:55:22 testmediasoftusa-1 named[3839]: FORMERR resolving 'resolver.2.geo.ctmail.com/AAAA/IN': 65.74.168.211#53

2009:08:12-13:55:22 testmediasoftusa-1 named[3839]: FORMERR resolving 'resolver.2.geo.ctmail.com/AAAA/IN': 208.50.223.241#53

2009:08:12-13:55:22 testmediasoftusa-1 named[3839]: FORMERR resolving 'resolver.2.geo.ctmail.com/AAAA/IN': 116.92.1.84#53

2009:08:12-13:55:24 testmediasoftusa-1 named[3839]: too many timeouts resolving 'resolver.2.geo.ctmail.com/AAAA' (in 'geo.ctmail.com'?): disabling EDNS

2009:08:12-13:55:25 testmediasoftusa-1 named[3839]: unexpected RCODE (SERVFAIL) resolving 'resolver.2.geo.ctmail.com/AAAA/IN': X.X.0.7#53

2009:08:12-13:55:27 testmediasoftusa-1 named[3839]: FORMERR resolving 'resolver.nobgp.glb.ctmail.com/AAAA/IN': 216.163.188.42#53

2009:08:12-13:55:27 testmediasoftusa-1 named[3839]: FORMERR resolving 'resolver.nobgp.glb.ctmail.com/AAAA/IN': 65.74.168.212#53

2009:08:12-13:55:34 testmediasoftusa-1 named[3839]: too many timeouts resolving 'resolver.nobgp.glb.ctmail.com/AAAA' (in 'glb.ctmail.com'?): disabling EDNS

2009:08:12-13:55:36 testmediasoftusa-1 named[3839]: unexpected RCODE (SERVFAIL) resolving 'resolver.nobgp.glb.ctmail.com/AAAA/IN': X.X.0.7#53

Does that mean that someone is trying to relay mail off the unit, or what?

Earlier, I noticed that there seemed to be more activity than expected on the Dashboard.  Here's a pic of what I saw - unexpected, outbound DNS requests.

Thanks for any insights or suggestions.

Cheers - Bob
Parents Reply Children