[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [FW1] strange problem resolving addresses
Hi all,
I am from Singapore. I thought it was my network or firewall that is
giving this problem. I am also facing the same problem for the last 3
days.
regards,
Vincent
--- Roger Nebel <roger@homecom.com> wrote:
> my caffeine induced guess is that someone got tired
> of having the global
> dns constantly being hit for address resolution on
> rfc private addresses
> which should be resolved internally anyways...so
> from now on you get the
> digital equivalent of a reminder to buckle up...aka
> an idiot light.
>
> JByrd@iucu.org wrote:
> >
> > Steve,
> >
> > That is the catch. I do have an internal DNS
> server. It has the problem.
> > I have server names set up in it so I could do a
> fake internal zone. The
> > DNS bypasses that now and looks up to the internet
> now for them. I have a
> > backup DNS on the outside. It really isn't
> affected because it never sees
> > 10.x addresses just the legal NATted ones. Yes
> they do show up in my
> > firewall to, but I am not too worried about that.
> >
> > Now how do I explain to users they have problems
> getting into the intranet
> > because some one out on the internet changed a
> setting. They will think I
> > was making it up. ;)
> >
> > Yes it was a VERY stupid thing for them to do!
> >
> > I have in contact with many other institutions
> with the same issue. It is
> > probably a global wide issue.
> >
> > Thanks,
> >
> > James Byrd
> >
> > -----Original Message-----
> > From: Steve McBride [mailto:steve@zoneoftrust.com]
> > Sent: Wednesday, April 21, 1999 12:11 PM
> > To: 'JByrd@iucu.org'; AlexJohnston@tcbk.com;
> lp6356@alpha.rwu.edu;
> > uncleron@geocities.com;
> fw-1-mailinglist@lists.us.checkpoint.com
> > Subject: RE: [FW1] strange problem resolving
> addresses
> >
> > It is something that's on the root servers, I
> guess. Every nslookup I
> > do for an IP address in the RFC 1918 range comes
> back as named
> > "read-rfc1918-for-details.iana.net"
> >
> > Pretty stupid thing to do - the only way around it
> that I know of is
> > either an internal DNS server or maybe a hosts
> file local to your
> > firewall.
> >
> > Steve McBride
> >
> > -----Original Message-----
> > From: JByrd@iucu.org [mailto:JByrd@iucu.org]
> > Sent: Wednesday, April 21, 1999 10:06 AM
> > To: AlexJohnston@tcbk.com; lp6356@alpha.rwu.edu;
> uncleron@geocities.com;
> > fw-1-mailinglist@lists.us.checkpoint.com
> > Subject: RE: [FW1] strange problem resolving
> addresses
> >
> > I have dealt with the same issue all morning. How
> many of you out there
> > has
> > this affected? Is this a new DNS server hole? A
> problem with the root
> > servers? I have had to turn off internal DNS of
> my 10.x network to get
> > some
> > of my critical systems going again, because it was
> affecting them.
> >
> > Is there a fix??
> >
> > Thanks,,
> > James Byrd
> > PC/LAN Manager
> >
> > -----Original Message-----
> > From: Alex Johnston [mailto:AlexJohnston@tcbk.com]
> > Sent: Wednesday, April 21, 1999 12:07 PM
> > To: 'Larry Pesce'; uncleron@geocities.com;
> > fw-1-mailinglist@lists.us.checkpoint.com
> > Subject: RE: [FW1] strange problem resolving
> addresses
> >
> > NT here, last night all my RFC 1918 addressed
> devices began reporting
> > there
> > address in the logs as
> read-rfc1918-for-details.iana.net as well.
> >
> > This does prove a problem as any log files
> exported will now have
> > read-rfc1918-for-details.iana.net as the resolved
> address....any log
> > cruncher's defined queries are now worthless as
> all RFC1918 devices now
> > have
> > one address... read-rfc1918-for-details.iana.net
> !! (GRRR)
> >
> > How many other people have seen this? I thought
> it was my server unable
> > to
> > handle load of name resolution...
> > But we now have two others, on different
> platforms, with the same
> > symptoms
> > on the same day...
> >
> > Anybody else want to volunteer info??
> >
> > Alex
> >
> > -----Original Message-----
> > From: Larry Pesce
> [SMTP:lp6356@alpha.rwu.edu]
> > Sent: Wednesday, April 21, 1999 8:43 AM
> > To: uncleron@geocities.com;
> > fw-1-mailinglist@lists.us.checkpoint.com
> > Subject: Re: [FW1] strange problem
> resolving addresses
> >
> > I noticed a similar type of occurence
> today too...
> >
> > We use HP OpenView to manage our network,
> and it automaticaly
> > discovers
> > nodes using ARP tables from routers. A
> few months ago we
> > attached
> > our
> > network via ATM over Sonnet to another
> hospital, but HP OV did
> > not
> > discover
> > anything across our ATM router to the
> other hospital....untill
> > last
> > night.
> > And all of the other devices that were
> discovered at the other
> > hopital came
> > through with the same definition:
> > read-rfc1918-for-details.iana.net
> >
> > The other hospital uses a network
> 172.25.X.X and you are using
> > 192.168.X.X which are NOT in the range of
> address reserved for
> > private
> > internal networks, although close. The
> reserved networks are
> > listed
> > in
> > RFC1918.
> >
> > I'm thinking the IANA did something to
> notify all of those users
> > that are
> > using IP classes that are not specifcaly
> reserved for private
> > internal use,
> > but are using addresses that are close???
> >
> > Any one have any ideas?
> >
> > -Larry
> >
> > ----- Original Message -----
> > From: <uncleron@geocities.com>
> > To:
> <fw-1-mailinglist@lists.us.checkpoint.com>
> > Sent: Wednesday, April 21, 1999 10:51 AM
> > Subject: [FW1] strange problem resolving
> addresses
> >
> > >
> > > When I have address resolution turned on
> in the log viewer, my
> > private
> > > address machines (192.168.x.x) are
> resolved as
> > read-rfc-1918-for
> > > -details.iana.net. This started
> yesterday with 1 or 2
>
=== message truncated ===
> ATTACHMENT part 2 application/x-pkcs7-signature name=smime.p7s
_________________________________________________________
Do You Yahoo!?
Get your free @yahoo.com address at http://mail.yahoo.com
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================