[volunteers] (forw) Does the NYLUG nameserver think it's authoritative for SVLUG's domains?

[Rick Moen]

Addressee is the role account for NYLUG's sysadmins.

----- Forwarded message from Rick Moen <rick at linuxmafia.com> -----

Date: Fri, 17 Apr 2009 10:15:28 -0700
From: Rick Moen <rick at linuxmafia.com>
To: spacey-admin-nylug at ssr.com
Subject: Does the NYLUG nameserver think it's authoritative for SVLUG's
	domains?

Guys, would you check and make sure that the ns1.nylug.org nameserver is
doing _slave_ nameservice, pulling down zones from master nameserver
ns1.svlug.org at IP 64.62.190.98 ?

As you'll see below, my nameserver ns1.linuxmafia.com, aka ns3.svlug.org, 
received NOTIFY traffic from your nameserver, concerning those three
domains.  Only the master nameserver for a domain should be sending
NOTIFY to the others.  The others parse that message, which says "Hey,
slave nameservers, there's a new version of the zonefile available for
your pickup via AXFR or IXFR at the master.  You should consider getting
it now, instead of at your refresh interval."

If your nameserver is accidentally doing _master_ nameservice for
svlug.{org|net|com}, that would be bad, because that would tend to lead
to its zone contents diverging over time from the master nameserver's
version -- sort of a pope and antipope situation.


----- Forwarded message from logcheck system account <logcheck at linuxmafia.com> -----

To: logcheck at linuxmafia.com
Subject: linuxmafia.com 2009-04-17 10:02 Security Events
From: logcheck system account <logcheck at linuxmafia.com>
Date: Fri, 17 Apr 2009 10:02:17 -0700

This email is sent by logcheck. If you wish to no-longer receive it,
you can either deinstall the logcheck package or modify its
configuration file (/etc/logcheck/logcheck.conf).

Security Events
=-=-=-=-=-=-=-=
Apr 17 09:07:01 linuxmafia sshd[25992]: reverse mapping checking getaddrinfo for 119.93.16.34.static.pldt.net [119.93.16.34] failed - POSSIBLE BREAK-IN ATTEMPT!
Apr 17 09:58:55 linuxmafia sshd[26257]: reverse mapping checking getaddrinfo for hosted-by.espito.net [77.243.236.32] failed - POSSIBLE BREAK-IN ATTEMPT!

System Events
=-=-=-=-=-=-=
Apr 17 09:47:35 linuxmafia named[16632]: zone svlug.net/IN: refused notify from non-master: 69.31.83.184#48239
Apr 17 09:47:35 linuxmafia named[16632]: zone svlug.org/IN: refused notify from non-master: 69.31.83.184#48239
Apr 17 09:47:35 linuxmafia named[16632]: zone svlug.com/IN: refused notify from non-master: 69.31.83.184#48239


----- End forwarded message -----

----- End forwarded message -----