DNS Lookups

Discussion in 'General' started by kieron, May 2, 2011.

  1. kieron

    kieron New Member

    Hi All

    I have just been checking through my system logs and have noticed a lot of these in there

    client 210.125.84.44#60392: query (cache) 'mail.google.com/A/IN' denied
    These seem to be quite regular and with about 30 entries all with differant ips.
    I am using ubuntu 804 ispconfig 2, BIND 9.4.2-P2.1.

    May 2 17:23:36 jobbers named[25357]: client 129.130.252.141#60623: query (cache) 'video.google.com/A/IN' denied
    May 2 17:23:36 jobbers named[25357]: client 129.130.252.141#42802: query (cache) 'www.youtube.com/A/IN' denied
    May 2 17:23:37 jobbers named[25357]: client 129.130.252.141#33975: query (cache) 'picasa.google.com/A/IN' denied
    May 2 17:23:37 jobbers named[25357]: client 129.130.252.141#38705: query (cache) 'picasaweb.google.com/A/IN' denied
    May 2 17:23:38 jobbers named[25357]: client 129.130.252.141#47566: query (cache) 'docs.google.com/A/IN' denied
    May 2 17:23:38 jobbers named[25357]: client 129.130.252.141#35251: query (cache) 'code.google.com/A/IN' denied
    May 2 17:23:38 jobbers named[25357]: client 129.130.252.141#53749: query (cache) 'buzz.google.com/A/IN' denied
    May 2 17:23:39 jobbers named[25357]: client 129.130.252.141#46436: query (cache) 'wave.google.com/A/IN' denied
    May 2 17:25:47 jobbers named[25357]: client 210.125.84.44#48304: query (cache) 'www.google.com/A/IN' denied
    May 2 17:25:47 jobbers named[25357]: client 210.125.84.44#40103: query (cache) 'answers.google.com/A/IN' denied
    May 2 17:25:48 jobbers named[25357]: client 210.125.84.44#52957: query (cache) 'directory.google.com/A/IN' denied
    May 2 17:25:48 jobbers named[25357]: client 210.125.84.44#46995: query (cache) 'products.google.com/A/IN' denied
    May 2 17:25:48 jobbers named[25357]: client 210.125.84.44#56305: query (cache) 'groups.google.com/A/IN' denied
    May 2 17:25:49 jobbers named[25357]: client 210.125.84.44#37195: query (cache) 'apps.google.com/A/IN' denied
    May 2 17:25:49 jobbers named[25357]: client 210.125.84.44#39414: query (cache) 'images.google.com/A/IN' denied
    May 2 17:25:49 jobbers named[25357]: client 210.125.84.44#36010: query (cache) 'maps.google.com/A/IN' denied
    May 2 17:25:50 jobbers named[25357]: client 210.125.84.44#55960: query (cache) 'news.google.com/A/IN' denied
    May 2 17:25:50 jobbers named[25357]: client 210.125.84.44#34690: query (cache) 'scholar.google.com/A/IN' denied
    May 2 17:25:50 jobbers named[25357]: client 210.125.84.44#42215: query (cache) 'adsense.google.com/A/IN' denied
    May 2 17:25:51 jobbers named[25357]: client 210.125.84.44#57404: query (cache) 'adwords.google.com/A/IN' denied
    May 2 17:25:51 jobbers named[25357]: client 210.125.84.44#40481: query (cache) 'desktop.google.com/A/IN' denied
    May 2 17:25:52 jobbers named[25357]: client 210.125.84.44#60392: query (cache) 'mail.google.com/A/IN' denied
    May 2 17:25:52 jobbers named[25357]: client 210.125.84.44#55658: query (cache) 'pop.gmail.com/A/IN' denied
    May 2 17:25:52 jobbers named[25357]: client 210.125.84.44#40505: query (cache) 'imap.gmail.com/A/IN' denied
    May 2 17:25:53 jobbers named[25357]: client 210.125.84.44#57243: query (cache) 'smtp.gmail.com/A/IN' denied
    May 2 17:25:53 jobbers named[25357]: client 210.125.84.44#51602: query (cache) 'www.orkut.com/A/IN' denied
    May 2 17:25:53 jobbers named[25357]: client 210.125.84.44#36830: query (cache) 'toolbar.google.com/A/IN' denied
    May 2 17:25:54 jobbers named[25357]: client 210.125.84.44#47299: query (cache) 'www.blogspot.com/A/IN' denied
    May 2 17:25:54 jobbers named[25357]: client 210.125.84.44#60567: query (cache) 'mobile.blogspot.com/A/IN' denied
    May 2 17:25:54 jobbers named[25357]: client 210.125.84.44#47102: query (cache) 'blog.google.com/A/IN' denied
    May 2 17:25:55 jobbers named[25357]: client 210.125.84.44#48662: query (cache) 'mobile.blogger.com/A/IN' denied
    May 2 17:25:55 jobbers named[25357]: client 210.125.84.44#51679: query (cache) 'calendar.google.com/A/IN' denied
    May 2 17:25:56 jobbers named[25357]: client 210.125.84.44#53166: query (cache) 'translate.google.com/A/IN' denied
    May 2 17:25:56 jobbers named[25357]: client 210.125.84.44#35487: query (cache) 'realtime.google.com/A/IN' denied
    May 2 17:25:56 jobbers named[25357]: client 210.125.84.44#54224: query (cache) 'finance.google.com/A/IN' denied
    May 2 17:25:57 jobbers named[25357]: client 210.125.84.44#48094: query (cache) 'reader.google.com/A/IN' denied
    May 2 17:25:57 jobbers named[25357]: client 210.125.84.44#34348: query (cache) 'video.google.com/A/IN' denied
    May 2 17:25:57 jobbers named[25357]: client 210.125.84.44#39049: query (cache) 'www.youtube.com/A/IN' denied
    May 2 17:25:58 jobbers named[25357]: client 210.125.84.44#35156: query (cache) 'picasa.google.com/A/IN' denied
    May 2 17:25:58 jobbers named[25357]: client 210.125.84.44#54804: query (cache) 'picasaweb.google.com/A/IN' denied
    May 2 17:25:58 jobbers named[25357]: client 210.125.84.44#49351: query (cache) 'docs.google.com/A/IN' denied
    May 2 17:25:59 jobbers named[25357]: client 210.125.84.44#60676: query (cache) 'code.google.com/A/IN' denied
    May 2 17:25:59 jobbers named[25357]: client 210.125.84.44#56031: query (cache) 'buzz.google.com/A/IN' denied
    May 2 17:26:00 jobbers named[25357]: client 210.125.84.44#58373: query (cache) 'wave.google.com/A/IN' denied

    Thank you

    Kieron
     
  2. Captain

    Captain Member

    It is normal, if you use spf mail.google.com in your DNS.
     
  3. kieron

    kieron New Member

    Hi thank you for your reply.
    But i dont use spf mail.google.com in my DNS

    These have only just started happening the last few days.

    Kieron
     
  4. falko

    falko Super Moderator ISPConfig Developer

    Not sure, but maybe someone is trying to test if your DNS server allows recursive lookups.
     
  5. kieron

    kieron New Member

    Hi
    Thank you for your replys, they seem to have stopped for now so perhaps you were right.
    I will keep an eye on the logs.

    Kieron
     

Share This Page