Jim Perrin wrote: >On 12/6/05, Sam Drinkard <sam at wa4phy.net> wrote: > > >>Found this entry in the log this morning. Never have seen such >>before....... >> >> --------------------- Named Begin ------------------------ >> >> >>**Unmatched Entries** >> dispatch 0x8ea6e48: shutting down due to TCP receive error: connection reset: 1 Time(s) >> >> ---------------------- Named End ------------------------- >> >> >>As I understand it, this is caused by named being fed bad packets, >>either by some form of automated attack, or crappy dns server that >>named queried on its way to find out what you asked it for. Depending >>on the verbosity of the named logs you keep, you could grep this out, >>and look at the queries near it to see if there's a particular cause. >>Or it may not be worth it to you >> >> I've been getting these lately too...on servers in the US/China/Australia. So I suspect it's another idiotic scriptkiddie attack. Cheers,