DNS Lookups

Discussion in 'General' started by kieron, May 2, 2011.

  1. kieron

    kieron New Member

    Hi All

    I have just been checking through my system logs and have noticed a lot of these in there

    client 210.125.84.44#60392: query (cache) 'mail.google.com/A/IN' denied
    These seem to be quite regular and with about 30 entries all with differant ips.
    I am using ubuntu 804 ispconfig 2, BIND 9.4.2-P2.1.

    May 2 17:23:36 jobbers named[25357]: client 129.130.252.141#60623: query (cache) 'video.google.com/A/IN' denied
    May 2 17:23:36 jobbers named[25357]: client 129.130.252.141#42802: query (cache) 'www.youtube.com/A/IN' denied
    May 2 17:23:37 jobbers named[25357]: client 129.130.252.141#33975: query (cache) 'picasa.google.com/A/IN' denied
    May 2 17:23:37 jobbers named[25357]: client 129.130.252.141#38705: query (cache) 'picasaweb.google.com/A/IN' denied
    May 2 17:23:38 jobbers named[25357]: client 129.130.252.141#47566: query (cache) 'docs.google.com/A/IN' denied
    May 2 17:23:38 jobbers named[25357]: client 129.130.252.141#35251: query (cache) 'code.google.com/A/IN' denied
    May 2 17:23:38 jobbers named[25357]: client 129.130.252.141#53749: query (cache) 'buzz.google.com/A/IN' denied
    May 2 17:23:39 jobbers named[25357]: client 129.130.252.141#46436: query (cache) 'wave.google.com/A/IN' denied
    May 2 17:25:47 jobbers named[25357]: client 210.125.84.44#48304: query (cache) 'www.google.com/A/IN' denied
    May 2 17:25:47 jobbers named[25357]: client 210.125.84.44#40103: query (cache) 'answers.google.com/A/IN' denied
    May 2 17:25:48 jobbers named[25357]: client 210.125.84.44#52957: query (cache) 'directory.google.com/A/IN' denied
    May 2 17:25:48 jobbers named[25357]: client 210.125.84.44#46995: query (cache) 'products.google.com/A/IN' denied
    May 2 17:25:48 jobbers named[25357]: client 210.125.84.44#56305: query (cache) 'groups.google.com/A/IN' denied
    May 2 17:25:49 jobbers named[25357]: client 210.125.84.44#37195: query (cache) 'apps.google.com/A/IN' denied
    May 2 17:25:49 jobbers named[25357]: client 210.125.84.44#39414: query (cache) 'images.google.com/A/IN' denied
    May 2 17:25:49 jobbers named[25357]: client 210.125.84.44#36010: query (cache) 'maps.google.com/A/IN' denied
    May 2 17:25:50 jobbers named[25357]: client 210.125.84.44#55960: query (cache) 'news.google.com/A/IN' denied
    May 2 17:25:50 jobbers named[25357]: client 210.125.84.44#34690: query (cache) 'scholar.google.com/A/IN' denied
    May 2 17:25:50 jobbers named[25357]: client 210.125.84.44#42215: query (cache) 'adsense.google.com/A/IN' denied
    May 2 17:25:51 jobbers named[25357]: client 210.125.84.44#57404: query (cache) 'adwords.google.com/A/IN' denied
    May 2 17:25:51 jobbers named[25357]: client 210.125.84.44#40481: query (cache) 'desktop.google.com/A/IN' denied
    May 2 17:25:52 jobbers named[25357]: client 210.125.84.44#60392: query (cache) 'mail.google.com/A/IN' denied
    May 2 17:25:52 jobbers named[25357]: client 210.125.84.44#55658: query (cache) 'pop.gmail.com/A/IN' denied
    May 2 17:25:52 jobbers named[25357]: client 210.125.84.44#40505: query (cache) 'imap.gmail.com/A/IN' denied
    May 2 17:25:53 jobbers named[25357]: client 210.125.84.44#57243: query (cache) 'smtp.gmail.com/A/IN' denied
    May 2 17:25:53 jobbers named[25357]: client 210.125.84.44#51602: query (cache) 'www.orkut.com/A/IN' denied
    May 2 17:25:53 jobbers named[25357]: client 210.125.84.44#36830: query (cache) 'toolbar.google.com/A/IN' denied
    May 2 17:25:54 jobbers named[25357]: client 210.125.84.44#47299: query (cache) 'www.blogspot.com/A/IN' denied
    May 2 17:25:54 jobbers named[25357]: client 210.125.84.44#60567: query (cache) 'mobile.blogspot.com/A/IN' denied
    May 2 17:25:54 jobbers named[25357]: client 210.125.84.44#47102: query (cache) 'blog.google.com/A/IN' denied
    May 2 17:25:55 jobbers named[25357]: client 210.125.84.44#48662: query (cache) 'mobile.blogger.com/A/IN' denied
    May 2 17:25:55 jobbers named[25357]: client 210.125.84.44#51679: query (cache) 'calendar.google.com/A/IN' denied
    May 2 17:25:56 jobbers named[25357]: client 210.125.84.44#53166: query (cache) 'translate.google.com/A/IN' denied
    May 2 17:25:56 jobbers named[25357]: client 210.125.84.44#35487: query (cache) 'realtime.google.com/A/IN' denied
    May 2 17:25:56 jobbers named[25357]: client 210.125.84.44#54224: query (cache) 'finance.google.com/A/IN' denied
    May 2 17:25:57 jobbers named[25357]: client 210.125.84.44#48094: query (cache) 'reader.google.com/A/IN' denied
    May 2 17:25:57 jobbers named[25357]: client 210.125.84.44#34348: query (cache) 'video.google.com/A/IN' denied
    May 2 17:25:57 jobbers named[25357]: client 210.125.84.44#39049: query (cache) 'www.youtube.com/A/IN' denied
    May 2 17:25:58 jobbers named[25357]: client 210.125.84.44#35156: query (cache) 'picasa.google.com/A/IN' denied
    May 2 17:25:58 jobbers named[25357]: client 210.125.84.44#54804: query (cache) 'picasaweb.google.com/A/IN' denied
    May 2 17:25:58 jobbers named[25357]: client 210.125.84.44#49351: query (cache) 'docs.google.com/A/IN' denied
    May 2 17:25:59 jobbers named[25357]: client 210.125.84.44#60676: query (cache) 'code.google.com/A/IN' denied
    May 2 17:25:59 jobbers named[25357]: client 210.125.84.44#56031: query (cache) 'buzz.google.com/A/IN' denied
    May 2 17:26:00 jobbers named[25357]: client 210.125.84.44#58373: query (cache) 'wave.google.com/A/IN' denied

    Thank you

    Kieron
     
    kieron, May 2, 2011
    #1
  2. Captain

    Captain Member

    It is normal, if you use spf mail.google.com in your DNS.
     
    Captain, May 2, 2011
    #2
  3. kieron

    kieron New Member

    Hi thank you for your reply.
    But i dont use spf mail.google.com in my DNS

    These have only just started happening the last few days.

    Kieron
     
    kieron, May 2, 2011
    #3
  4. falko

    falko Super Moderator Howtoforge Staff

    Not sure, but maybe someone is trying to test if your DNS server allows recursive lookups.
     
    falko, May 4, 2011
    #4
  5. kieron

    kieron New Member

    Hi
    Thank you for your replys, they seem to have stopped for now so perhaps you were right.
    I will keep an eye on the logs.

    Kieron
     
    kieron, May 4, 2011
    #5

Share This Page