Re: How to prevent SA to make as112 calls?

2011-05-01 Thread SM
At 05:09 28-04-2011, Michelle Konzack wrote: It has nothing to do with my Mailserver, because SA makes the requests to other DNS servers and then I get the UDP-Flood alarm... See http://tools.ietf.org/html/draft-ietf-dnsop-as112-under-attack-help-help-05 04/24/2011 23:52:56 **UDP flood** 19

Re: How to prevent SA to make as112 calls?

2011-05-01 Thread Per Jessen
Michelle Konzack wrote: > The request was made on my Workstation <192.168.0.91> where the NS > is <192.168.0.74>. So, from the AUTHORITY SECTION I can see, my NS > server has asked the Internet (as a forwarder) and the response came > from the server which is a part of the AS112 > project.

Re: How to prevent SA to make as112 calls?

2011-04-30 Thread Benny Pedersen
On Thu, 28 Apr 2011 06:29:09 +0200, Michelle Konzack wrote: > 192.168.0.91Workstation > 192.168.0.69Intranet Server > 78.47.247.21Mail-Relay > x.y.z.n some_other_destination_server fqdn first, non fqdn host last 127.0.0.1 localhost.localdomain localhost not as this 127.0.

Re: How to prevent SA to make as112 calls?

2011-04-29 Thread Benny Pedersen
On Tue, 26 Apr 2011 01:24:49 +0200, Michelle Konzack wrote: > since I use a "Vodafone Easybox 803A" I have encountered, that SA is > making of several 1000 as112¹ calls per day... sa call on mobile phone ? > My Intranet use <192.168.0.*> and <*.private.tamay-dogan.net> and work > correct

Re: How to prevent SA to make as112 calls?

2011-04-29 Thread Michelle Konzack
Hello Martin Gregorie, Am 2011-04-28 19:35:18, hacktest Du folgendes herunter: > CORRECTIONS: > > > That looks OK. I assume you've configured the server to be authoritative > > for the private.tamay-dogan.net domain, in which case: > > > > a) requests for unknown host names will be rejected imme

Re: How to prevent SA to make as112 calls?

2011-04-28 Thread Martin Gregorie
CORRECTIONS: > That looks OK. I assume you've configured the server to be authoritative > for the private.tamay-dogan.net domain, in which case: > > a) requests for unknown host names will be rejected immediately as >'unknown' > > b) requests for unknown IPs in outside subnet 0 will be rejec

Re: How to prevent SA to make as112 calls?

2011-04-28 Thread Martin Gregorie
On Thu, 2011-04-28 at 06:29 +0200, Michelle Konzack wrote: > Hello Martin Gregorie, > > Am 2011-04-26 23:59:23, hacktest Du folgendes herunter: > > Now I'm confused. AFAIK SA doesn't have any connection with AS112 > > lookups as either client or server - unless there's a plugin that hasn't > > bee

Re: How to prevent SA to make as112 calls?

2011-04-28 Thread Michelle Konzack
Hello Niamh Holding, Am 2011-04-28 07:08:54, hacktest Du folgendes herunter: > Don't you want to trust back to 78.47.247.21 and no further? It has nothing to do with my Mailserver, because SA makes the requests to other DNS servers and then I get the UDP-Flood alarm... 04/24/2011 23:52:56 **U

Re: How to prevent SA to make as112 calls?

2011-04-27 Thread Niamh Holding
Hello Michelle, Thursday, April 28, 2011, 5:29:09 AM, you wrote: MK> I do not know whether I should do this, because the 10.x.y.z comes from MK> my ISP (Telefonica/O2) and from the view of my network, it is OUTSIDE. Don't you want to trust back to 78.47.247.21 and no further? -- Best regards

Re: How to prevent SA to make as112 calls?

2011-04-27 Thread Michelle Konzack
Hello Martin Gregorie, Am 2011-04-26 23:59:23, hacktest Du folgendes herunter: > Now I'm confused. AFAIK SA doesn't have any connection with AS112 > lookups as either client or server - unless there's a plugin that hasn't > been mentioned on this list since I joined. If I'm wrong about this I > ex

Re: How to prevent SA to make as112 calls?

2011-04-26 Thread Martin Gregorie
On Tue, 2011-04-26 at 20:23 +0200, Michelle Konzack wrote: > This problem started, when I switched from DSL to GSM Service where in > GSM I have an IP <10.x.y.z>. It seems, that spamassassin is confused > because I have a NS master and a forwarder and > now traffic is not ending ina publich

Re: How to prevent SA to make as112 calls?

2011-04-26 Thread Michelle Konzack
Hello Martin Gregorie, Am 2011-04-26 10:44:13, hacktest Du folgendes herunter: > How is the AS112 server in your Easybox configured? Can you configure it > to turn your local intranet addresses into local loopbacks? This problem started, when I switched from DSL to GSM Service where in GSM I ha

Re: How to prevent SA to make as112 calls?

2011-04-26 Thread Martin Gregorie
On Tue, 2011-04-26 at 01:24 +0200, Michelle Konzack wrote: > Hi *, > > since I use a "Vodafone Easybox 803A" I have encountered, that SA is > making of several 1000 as112¹ calls per day... > > My Intranet use <192.168.0.*> and <*.private.tamay-dogan.net> and work > correctly, since ages but

How to prevent SA to make as112 calls?

2011-04-25 Thread Michelle Konzack
Hi *, since I use a "Vodafone Easybox 803A" I have encountered, that SA is making of several 1000 as112¹ calls per day... My Intranet use <192.168.0.*> and <*.private.tamay-dogan.net> and work correctly, since ages but can someone give me tips how to stop SA to check for private IP's?