Results 1 to 5 of 5
  1. #1
    Join Date
    Jan 2001

    Thousands of "lame server resolving" lines in /var/log/messages

    Hello there,

    All of a sudden I see some 2500 lines of "lame server resolving" messages in /var/log/messages on a low traffic web server (some 500-600 daily visitors), like this:
    May 23 16:58:35 host named[3441]: lame server resolving '' (in ''?):
    They started at 16:58:35 and seem like ended (for this turn?) at 17:31:47.

    There are altogether some 500-600 different IP's referred to.

    Is this an attack? If yes, what might be its target and how to defend it?

    Server was newly, fully reinstalled after it had been rooted a few days ago. Kernel is 2.4.20-8, RH 9 with cPanel, no firewall installed.

    Thank you very much for your thoughts.

  2. #2
    Join Date
    Mar 2003
    California USA
    edit you named.conf go the options section and add
    logging {
    category "lame-servers" {

    restart bind. Btw i highly suggest you upgrade your kernel.
    Steven Ciaburri | Industry's Best Server Management -
    Software Auditing - 400+ Vulnerabilities Found - Quote @
    Fully Managed Dedicated Servers (Las Vegas, New York City, & Amsterdam) (AS62710)
    FreeBSD & Linux Server Management, Security Auditing, Server Optimization, PCI Compliance

  3. #3
    I would also suggest you install a firewall. Get APF for example which is fairly easy for most people to install.
    Like us on Facebook to qualify for discounts!
    Offering: | Internap FCP Bandwidth! | Rebootless Kernel Updates! | Magento Optimized Hosting | Wordpress Hosting |
    Services: | Managed Multiple Cores 64bit Servers | Server Management |

  4. #4
    Join Date
    May 2003
    Los Gatos
    how could I send the requests to an advertising page or page of my choosing?
    Server$ Reseller/Hosting For Real People
    WebHostingAccess Trial Accounts Upon Request Get over IT Get over yourself
    Yahoo IM: concreteseller | Toll Free Support: 1-888-603-5305 | Like the Maytag repairman

  5. #5
    Join Date
    Dec 2000
    hehe yes intersting... how to send all lame server requests to an adv page on my service?

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts