Odd log messages from ISC BIND named

[Ben Scott]

On Tue, Feb 3, 2009 at 3:08 PM,  <VirginSnow at vfemail.net> wrote:
> But judging by the differences between the queries, this is
> more likely a known-plaintext attack on a WEP, a VPN,
> or similar.

  Okay, I might buy that, but what's it doing on our DNS server?  This
wasn't simply a misconfigured DNS client, because these were the only
queries from the IP in question.  Nothing legitimate was tried.  Just
long, single-label domain names.

-- Ben