Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 6 replies
  • Subscribers 2 subscribers
  • Views 983 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Dns errors - multi.uribl.com

Goldy_01
Hi to all.

Recently, my DNS log has ALOT of this kind of errors:
2010:11:22-20:03:15 mhgate named [29810]: unexpected RCODE (SERVFAIL) resolving 'pompa.co.il.multi.uribl.com/A/IN': "my ISP DNS" #53

All of them have the " multi.uribl.com" .

Any idea how to find out the source of those queries, and how to block it?
Packet filter and Web Security don't seem to work...
[:S]


This thread was automatically locked due to age.
Parents
  • 0
    Hi Balfson and thanks.

    " 1. With this done, the DNS requests only can come from the Astaro itself. Do the lines appear as bloced in the packet filter log if you disable Astaro DNS?"
     - I don't see any " uribl.com" or anything related  in the Packet filter log.

    " 4. Since these aren't HTTP packets, no rule in Web Security can block it. I wonder if turning off the HTTP/S Proxy would stop the requests?"
    I gave it a try – Nop…
Reply
  • 0
    Hi Balfson and thanks.

    " 1. With this done, the DNS requests only can come from the Astaro itself. Do the lines appear as bloced in the packet filter log if you disable Astaro DNS?"
     - I don't see any " uribl.com" or anything related  in the Packet filter log.

    " 4. Since these aren't HTTP packets, no rule in Web Security can block it. I wonder if turning off the HTTP/S Proxy would stop the requests?"
    I gave it a try – Nop…
Children
No Data