A few days ago I was getting hourly reports that two of the sub-domains on my server had suspicious processes running. I couldn't figure out what they were, so I rebooted the server. Those messages have not returned.
However, in my Logwatch email, in the Named section, I have the following messages;
**Unmatched Entries**
/etc/named.conf:13: using specific query-source port suppresses port randomization and can be insecure.: 1 Time(s)
adjusted limit on open files from 1024 to 1048576: 1 Time(s)
network unreachable resolving './NS/IN': 2001:500:2f::f#53: 1 Time(s)
network unreachable resolving '1.115.74.204.sbl.spamhaus.org/TXT/IN': 2001:7b8:3:1f:0:2:53:2#53: 1 Time(s)
network unreachable resolving '1.193.124.98.sbl.spamhaus.org/TXT/IN': 2001:7b8:3:1f:0:2:53:1#53: 1 Time(s)
... 1,071 more entries in between ...
network unreachable resolving 'zupuctv.cn/NS/IN': 2001:dc7:1000::1#53: 1 Time(s)
network unreachable resolving 'zupuctv.cn/NS/IN': 2001:dc7::1#53: 1 Time(s)
the working directory is not writable: 1 Time(s)
using default UDP/IPv4 port range: [1024, 65535]: 1 Time(s)
using default UDP/IPv6 port range: [1024, 65535]: 1 Time(s)
using up to 4096 sockets: 1 Time(s)
I don't understand what's happening or what I should do about it. Any suggestions will be deeply appreciated.



LinkBack URL
About LinkBacks
Reply With Quote




