is your host or dhcp server sending dns dynamic updatesfor rfc1918?

Fri Apr 19 20:18:41 UTC 2002

> -----Original Message-----
> From: owner-nanog at merit.edu [mailto:owner-nanog at merit.edu] On 
> Behalf Of Doug Barton
> Sent: April 19, 2002 2:56 PM
> To: nanog at merit.edu
> Subject: Re: is your host or dhcp server sending dns dynamic 
> updatesfor rfc1918?
> 
> 	Also, since I operate authoritative DNS servers for our
> *mumble*BIGNUM*mumble* customers, we used to get besieged by 
> these update requests from our eager new customers who named 
> their home (or office,
> whatever) computers in their shiny new domain name. At one 
> point, the server listed in the MNAME field of the SOA got 
> more update requests than queries! My solution for this was 
> to change the MNAME field to no-dyn-updates.san.yahoo.com, 
> which resolves to the loopback address. (After overcoming 
> tremendous temptation to make it resolve to
> 207.46.138.20.) W2k's behavior here is truly horrible... it 
> sends 5 requests at startup, then keeps sending requests, 
> apparently forever, till it gets an answer it thinks it likes.

We have the same problem here; people get a shiny new hostname like
blah.dyndns.org and set their computer to that name. It starts
bombarding our servers with update attempts; I'm not the one here who
handles looking at BIND logs, but I think even a year ago or so we were
getting like 5 update attempts per second. It's probably WAY more now,
since our userbase has like doubled in a year.

We used to try to hunt the people down and get them to turn it off; we
don't anymore, there's just too many of them... It's not just Win2000,
either: ISC's DHCP client (or server?) version 3.something (might have
been a beta?) and I think WinME (and naturally, XP since it's just 2000
on steroids) have been known in the past to send us those silly
updates...

And then, there's the problem of people whose mail servers think their
domain is dyndns.org and their *NIX cron sends mail to root at dyndns.org
instead of root on their machine, but that's an entirely different
issue... 

Vivien
-- 
Vivien M.
vivienm at dyndns.org
Assistant System Administrator
Dynamic DNS Network Services
http://www.dyndns.org/ 