Discuss mailing list

[Peter Green <peter AT greenpete.co.uk>]

Ok, thanks.

I guess then that whoever is making the queries is doing it manually.

In which case it is likely to be someone messing about?

Peter

On Fri, 9 Mar 2012 14:42:45 -0500, Rampant Badger wrote:

> On Fri, Mar 9, 2012 at 10:05 AM, Peter Green wrote:
>
> > I wonder if anyone can shed some light on this oddity, a line from 
> > my
> > named.log... "09-Mar-2012 15:00:20.252 client 80.169.158.122#17243:
> > query: ns1.nAno-HosT.CO.uk IN A - (83.142.229.97)" Notice that the
> > domain name is in a mixture of upper and lower case characters! I 
> > have
> > tried to replicate this by typing in the address bar of my browser 
> > like
> > that but the log file shows my request in lower case.
>
> Looks okay to me. Rather than using a web browser (which will tend to
> lowercase the letters for you), use dig or some other direct tool:
>
> dou@resolver:~$ dig @localhost ns1.nAno-HosT.CO.uk
>
> ; DiG 9.7.3 @localhost ns1.nAno-HosT.CO.uk
>
> ;; QUESTION SECTION:
> ;ns1.nAno-HosT.CO.uk. IN A
>
> ;; ANSWER SECTION:
> ns1.nAno-HosT.CO.uk. 38400 IN A 83.142.229.97
>
> ;; AUTHORITY SECTION:
> nAno-HosT.CO.uk. 38400 IN NS ns2.nAno-HosT.CO.uk.
> nAno-HosT.CO.uk. 38400 IN NS ns1.nAno-HosT.CO.uk.
>
> and:
>
> dou@resolver:~$ sudo tail /var/log/named/named.log
> 09-Mar-2012 19:38:18.910 client 127.0.0.1#48614: query:
> ns1.nAno-HosT.CO.uk IN A + (127.0.0.1)
>
> Best,
>
> RB


Links:
------
[1] mailto:peter AT greenpete.co.uk