Weird connection listening to BIND9

Discussion in 'Installation/Configuration' started by Stown, Nov 17, 2010.

  1. Stown

    Stown ISPConfig Developer ISPConfig Developer

    Hi all,

    I have a server (Debian lenny 64bit) setup with ISPConfig 3 for a couple websites.

    Now recently i see throught the command netstat -tap a weird listening connection everytime when i start bind9. If I stop it it is gone, with ofcourse some other listening connections.

    The listening connection is:
    [email protected].. *:* LISTEN 12987/named

    Here is a screenshot: http://i51.tinypic.com/2hqux07.png

    I checked every configuration file for it but cant seem where it is comming from.
    I thought ofcourse of a virus or botnet but i cannot find anything.

    Does anyone know something of this?

    Google seems to know nothing..

    Thank you
     
  2. Stown

    Stown ISPConfig Developer ISPConfig Developer

    Problem solved!

    When i contacted the support of the server management at Rotterdam, NL they looked at it and they found that it was their fould.

    Because, the person who had my assigned IP before me had requested a PTR record to that IP on the SMTP port.

    And rarely that previous person whas in business with sites like my.mom.ignorelist.info and is.a.meatspanker..

    I got some money back for that time i got the problem.

    So now you see, everything is possible :p
     

Share This Page