#1  
Old 2nd May 2011, 18:36
kieron kieron is offline
Junior Member
 
Join Date: Aug 2007
Posts: 12
Thanks: 1
Thanked 0 Times in 0 Posts
Default DNS Lookups

Hi All

I have just been checking through my system logs and have noticed a lot of these in there

client 210.125.84.44#60392: query (cache) 'mail.google.com/A/IN' denied
These seem to be quite regular and with about 30 entries all with differant ips.
I am using ubuntu 804 ispconfig 2, BIND 9.4.2-P2.1.

May 2 17:23:36 jobbers named[25357]: client 129.130.252.141#60623: query (cache) 'video.google.com/A/IN' denied
May 2 17:23:36 jobbers named[25357]: client 129.130.252.141#42802: query (cache) 'www.youtube.com/A/IN' denied
May 2 17:23:37 jobbers named[25357]: client 129.130.252.141#33975: query (cache) 'picasa.google.com/A/IN' denied
May 2 17:23:37 jobbers named[25357]: client 129.130.252.141#38705: query (cache) 'picasaweb.google.com/A/IN' denied
May 2 17:23:38 jobbers named[25357]: client 129.130.252.141#47566: query (cache) 'docs.google.com/A/IN' denied
May 2 17:23:38 jobbers named[25357]: client 129.130.252.141#35251: query (cache) 'code.google.com/A/IN' denied
May 2 17:23:38 jobbers named[25357]: client 129.130.252.141#53749: query (cache) 'buzz.google.com/A/IN' denied
May 2 17:23:39 jobbers named[25357]: client 129.130.252.141#46436: query (cache) 'wave.google.com/A/IN' denied
May 2 17:25:47 jobbers named[25357]: client 210.125.84.44#48304: query (cache) 'www.google.com/A/IN' denied
May 2 17:25:47 jobbers named[25357]: client 210.125.84.44#40103: query (cache) 'answers.google.com/A/IN' denied
May 2 17:25:48 jobbers named[25357]: client 210.125.84.44#52957: query (cache) 'directory.google.com/A/IN' denied
May 2 17:25:48 jobbers named[25357]: client 210.125.84.44#46995: query (cache) 'products.google.com/A/IN' denied
May 2 17:25:48 jobbers named[25357]: client 210.125.84.44#56305: query (cache) 'groups.google.com/A/IN' denied
May 2 17:25:49 jobbers named[25357]: client 210.125.84.44#37195: query (cache) 'apps.google.com/A/IN' denied
May 2 17:25:49 jobbers named[25357]: client 210.125.84.44#39414: query (cache) 'images.google.com/A/IN' denied
May 2 17:25:49 jobbers named[25357]: client 210.125.84.44#36010: query (cache) 'maps.google.com/A/IN' denied
May 2 17:25:50 jobbers named[25357]: client 210.125.84.44#55960: query (cache) 'news.google.com/A/IN' denied
May 2 17:25:50 jobbers named[25357]: client 210.125.84.44#34690: query (cache) 'scholar.google.com/A/IN' denied
May 2 17:25:50 jobbers named[25357]: client 210.125.84.44#42215: query (cache) 'adsense.google.com/A/IN' denied
May 2 17:25:51 jobbers named[25357]: client 210.125.84.44#57404: query (cache) 'adwords.google.com/A/IN' denied
May 2 17:25:51 jobbers named[25357]: client 210.125.84.44#40481: query (cache) 'desktop.google.com/A/IN' denied
May 2 17:25:52 jobbers named[25357]: client 210.125.84.44#60392: query (cache) 'mail.google.com/A/IN' denied
May 2 17:25:52 jobbers named[25357]: client 210.125.84.44#55658: query (cache) 'pop.gmail.com/A/IN' denied
May 2 17:25:52 jobbers named[25357]: client 210.125.84.44#40505: query (cache) 'imap.gmail.com/A/IN' denied
May 2 17:25:53 jobbers named[25357]: client 210.125.84.44#57243: query (cache) 'smtp.gmail.com/A/IN' denied
May 2 17:25:53 jobbers named[25357]: client 210.125.84.44#51602: query (cache) 'www.orkut.com/A/IN' denied
May 2 17:25:53 jobbers named[25357]: client 210.125.84.44#36830: query (cache) 'toolbar.google.com/A/IN' denied
May 2 17:25:54 jobbers named[25357]: client 210.125.84.44#47299: query (cache) 'www.blogspot.com/A/IN' denied
May 2 17:25:54 jobbers named[25357]: client 210.125.84.44#60567: query (cache) 'mobile.blogspot.com/A/IN' denied
May 2 17:25:54 jobbers named[25357]: client 210.125.84.44#47102: query (cache) 'blog.google.com/A/IN' denied
May 2 17:25:55 jobbers named[25357]: client 210.125.84.44#48662: query (cache) 'mobile.blogger.com/A/IN' denied
May 2 17:25:55 jobbers named[25357]: client 210.125.84.44#51679: query (cache) 'calendar.google.com/A/IN' denied
May 2 17:25:56 jobbers named[25357]: client 210.125.84.44#53166: query (cache) 'translate.google.com/A/IN' denied
May 2 17:25:56 jobbers named[25357]: client 210.125.84.44#35487: query (cache) 'realtime.google.com/A/IN' denied
May 2 17:25:56 jobbers named[25357]: client 210.125.84.44#54224: query (cache) 'finance.google.com/A/IN' denied
May 2 17:25:57 jobbers named[25357]: client 210.125.84.44#48094: query (cache) 'reader.google.com/A/IN' denied
May 2 17:25:57 jobbers named[25357]: client 210.125.84.44#34348: query (cache) 'video.google.com/A/IN' denied
May 2 17:25:57 jobbers named[25357]: client 210.125.84.44#39049: query (cache) 'www.youtube.com/A/IN' denied
May 2 17:25:58 jobbers named[25357]: client 210.125.84.44#35156: query (cache) 'picasa.google.com/A/IN' denied
May 2 17:25:58 jobbers named[25357]: client 210.125.84.44#54804: query (cache) 'picasaweb.google.com/A/IN' denied
May 2 17:25:58 jobbers named[25357]: client 210.125.84.44#49351: query (cache) 'docs.google.com/A/IN' denied
May 2 17:25:59 jobbers named[25357]: client 210.125.84.44#60676: query (cache) 'code.google.com/A/IN' denied
May 2 17:25:59 jobbers named[25357]: client 210.125.84.44#56031: query (cache) 'buzz.google.com/A/IN' denied
May 2 17:26:00 jobbers named[25357]: client 210.125.84.44#58373: query (cache) 'wave.google.com/A/IN' denied

Thank you

Kieron
Reply With Quote
Sponsored Links
  #2  
Old 2nd May 2011, 21:42
Captain Captain is offline
Senior Member
 
Join Date: Feb 2009
Posts: 285
Thanks: 80
Thanked 7 Times in 6 Posts
Default

It is normal, if you use spf mail.google.com in your DNS.
Reply With Quote
  #3  
Old 2nd May 2011, 22:07
kieron kieron is offline
Junior Member
 
Join Date: Aug 2007
Posts: 12
Thanks: 1
Thanked 0 Times in 0 Posts
Default

Hi thank you for your reply.
But i dont use spf mail.google.com in my DNS

These have only just started happening the last few days.

Kieron
Reply With Quote
  #4  
Old 4th May 2011, 00:05
falko falko is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 41,701
Thanks: 1,900
Thanked 2,744 Times in 2,577 Posts
Default

Not sure, but maybe someone is trying to test if your DNS server allows recursive lookups.
__________________
Falko
--
Download the ISPConfig 3 Manual! | Check out the ISPConfig 3 Billing Module!

FB: http://www.facebook.com/howtoforge

nginx-Webhosting: Timme Hosting | Follow me on:
Reply With Quote
  #5  
Old 4th May 2011, 19:49
kieron kieron is offline
Junior Member
 
Join Date: Aug 2007
Posts: 12
Thanks: 1
Thanked 0 Times in 0 Posts
 
Default

Hi
Thank you for your replys, they seem to have stopped for now so perhaps you were right.
I will keep an eye on the logs.

Kieron
Reply With Quote
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Squid Proxy Caching on Linux obzerver Installation/Configuration 4 13th August 2008 19:51
Google Apps dayjahone General 19 29th March 2008 17:25
DNS Configuration Problems VMartins Installation/Configuration 10 24th July 2007 14:40
Unable send receive emails vassilis3 Installation/Configuration 15 19th May 2007 14:34
No SPF record. beryl Installation/Configuration 6 17th May 2007 19:52


All times are GMT +2. The time now is 16:08.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.