Search Again:

Re: Lame Delegation

From: Men & Mice Support
Date: Wednesday, June 2, 1999
Time: 11:43:00 pm

>>Spam. A spammer was apparently trying to send scads of mail through your
>>server, which was trying to verify the sender's name with your name server.
>>The name server was running into a lame delegation and was thus unable to
>>give the mail server a good answer. That's my guess.
>
>I'm assuming I have the same problem? Lots of "Lame Delegation...".
>
>I also get "Dropping Bogus Reply from..."?
>
>Is there something I need to do?

A bogus reply is a reply to a query that QuickDNS Pro did not send. It most
often happens when a server sends a response twice. I'd guess it's most
likely to occur in high-traffic conditions.

Lame delegation happens when a server delegates a subdomain to a server
that doesn't have the zone file. As an example:

e.root-servers.net has the following records:
domain.com. NS ns1.domain.com.
domain.com. NS ns2.domain.com.
ns1.domain.com. A xxx.xxx.xxx.xxx
ns2.domain.com. A xxx.xxx.xxx.xxx

When queried for www.domain.com, ns1.domain.com gives one of the following
non-authoritative responses:
domain.com. NS ns2.domain.com.
or
com. NS a.root-servers.net.
com. NS b.root-servers.net.
et cetera

If you're seeing a lot of lame delegation and bogus reply errors in a short
amount of time, this probably means that someone is querying your DNS
server for a large number of hosts outside your domain. If the machine
that's asking is your mail server, it's a good bet somebody's sending large
amounts of mail through it (or trying to).

To somewhat remedy this problem, use a mail server that prevents mail relaying.

Eric, I ran a quick test of macweb.com with DNS Expert, just checking mail
records and security, and found a couple of errors you should be aware of:

The name server "ns1.macweb.com." is vulnerable to spoofing attacks. You
can solve this by upgrading to the latest version of QuickDNS Pro.

The primary mail server "mail.macweb.com." can possibly be used as a mail
relay.
The primary mail server "mail.macweb.com." can possibly be used to process
a mail message where neither the sender nor the recipient is a local user.
____________________________________________________________________
Chris Buxton Men & Mice
cbuxton@menandmice.com http://www.menandmice.com



Messages In This Thread:



Return to Digital Point Solutions' Home Page