0
25-Jun-2013 15:31:57.138 queries: client 127.0.0.1#41134: query: 163.117.242.173.in-addr.arpa IN PTR + (127.0.0.1)
25-Jun-2013 15:31:57.150 queries: client 127.0.0.1#48114: query: proxy4.router.pm IN A + (127.0.0.1)

In my bind log, there a LOT of query like this. From localhost. But what is this !? What's on my server asking for reverse query?

1

From your description it is impossible to say what is causing these reverse lookups.

Such lookups are typically done by services listening on the network interface whenever somebody tries to connect. If this is the case here, you could e.g. use tcpdump to find what service is being used by this IP address: tcpdump -n host <ip>.

| improve this answer | |
  • I disinstalled from server samba and win<something> an rebooted. No more query .. boh ! – realtebo Jun 25 '13 at 15:53

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.