Please Help - Dns Server?
This is an archived, read-only copy of the United-TI subforum , including posts and topic from May 2003 to April 2012. If you would like to discuss any of the topics in this forum, you can visit Cemetech's Technology & Calculator Open Topic subforum. Some of these topics may also be directly-linked to active Cemetech topics. If you are a Cemetech member with a linked United-TI account, you can link United-TI topics here with your current Cemetech topics.

This forum is locked: you cannot post, reply to, or edit topics. Calculator Tech Support => Technology & Calculator Open Topic
Please Help - Dns Server?
United-TI Archives -> Calculator Tech Support
 
    »
» View previous topic :: View next topic  
Author Message
JoeImp
Enlightened


Active Member


Joined: 24 May 2003
Posts: 747
Posted: 03 Nov 2003 03:06:06 pm    Post subject:
Ok, first of all, I want to know what a DNS server is, and if I should have some by default in windows XP. Ive been noticing all these attacks on my computer in my firewall, and the attack that most of them are using are "DNS malformed." I went to network settings and double clicked on local area connection, then went to support and hit details, and it says I have 3 DNS servers. Is there any way to get rid of these? Help - lol

Imp
Back to top
62 52 53 53
Formerly known as 62 52 53 53


Active Member


Joined: 30 May 2003
Posts: 607
Posted: 03 Nov 2003 03:31:21 pm    Post subject:
isn't that a domain name server?
Back to top
AlienCC
Creative Receptacle!


Know-It-All


Joined: 24 May 2003
Posts: 1927
Posted: 03 Nov 2003 03:32:55 pm    Post subject:
DNS stands for Domain Name Server, you do not want to remove these from your internet connection settings because those machines are what resolve webaddresses such as UnitedTI so that you can surf the internet and connect to machines outside of your LAN (Local Area Network). By default you normally have 2 defined in your settings so that if one goes down you can still resolve webaddress and use the internet.

It sounds like you have a firewall setup, so you shouldn't need to worry too much since that will block those attacks.

--AlienCC
Back to top
JoeImp
Enlightened


Active Member


Joined: 24 May 2003
Posts: 747
Posted: 03 Nov 2003 06:32:46 pm    Post subject:
First of all, my firewall says all the attacks got through. It doesnt have the 'blocked' icon like it usually does. Second of all, I get about 50 of these a minute. It is really annoying. In like 10 seconds, I got this:

Time, Event, Intruder, Count
11/03/2003 06:33:40 PM, DNS malformed, adsl-78-253-140.mia.bellsouth.net, 2
11/03/2003 06:32:49 PM, DNS malformed, 216-98-72-211.wythe.mvl.ntelos.net, 1
11/03/2003 06:32:39 PM, DNS non-Internet lookup, 12-225-196-95.client.attbi.com, 1
11/03/2003 06:32:09 PM, DNS non-Internet lookup, pa-shippensburg-cmts1a-56.chvlva.adelphia.net, 1
11/03/2003 06:32:09 PM, DNS name overflow, pa-shippensburg-cmts1a-56.chvlva.adelphia.net, 1
11/03/2003 06:32:05 PM, DNS non-Internet lookup, AC87CA41.ipt.aol.com, 1
11/03/2003 06:31:54 PM, DNS non-Internet lookup, 12-225-196-95.client.attbi.com, 1
11/03/2003 06:31:49 PM, DNS non-Internet lookup, pa-shippensburg-cmts1a-56.chvlva.adelphia.net, 1
11/03/2003 06:31:44 PM, DNS malformed, OEMCOMPUTER, 1
11/03/2003 06:31:24 PM, DNS non-Internet lookup, 61.103.200.121, 1
11/03/2003 06:31:00 PM, UDP port probe, 200.13.165.8, 1
11/03/2003 06:30:49 PM, DNS malformed, ilm56-213-098.ec.rr.com, 1
11/03/2003 06:30:44 PM, DNS malformed, cable-68-185-230-84.sli.la.charter.com, 1
11/03/2003 06:30:29 PM, DNS malformed, cpe-24-151-137-159.ma.charter.com, 1
11/03/2003 06:30:26 PM, UDP port probe, 200.13.165.8, 1
11/03/2003 06:30:19 PM, DNS non-Internet lookup, CPE-24-208-37-201.new.rr.com, 1
11/03/2003 06:30:03 PM, UDP port probe, 200.13.165.8, 3
11/03/2003 06:29:44 PM, DNS malformed, 200.13.165.8, 1
11/03/2003 06:29:39 PM, DNS malformed, h24-78-41-141.tb.shawcable.net, 1
11/03/2003 06:28:54 PM, DNS non-Internet lookup, 12-213-219-156.client.attbi.com, 1
11/03/2003 06:28:49 PM, DNS malformed, PAVILION, 1
11/03/2003 06:28:14 PM, DNS malformed, cae88-3-248.sc.rr.com, 1
11/03/2003 06:27:39 PM, DNS non-Internet lookup, COMPUTER, 2
11/03/2003 06:26:54 PM, DNS non-Internet lookup, c-66-41-180-158.mn.client2.attbi.com, 1
11/03/2003 06:26:49 PM, DNS non-Internet lookup, ip68-99-212-204.ph.ph.cox.net, 1
11/03/2003 06:26:44 PM, DNS malformed, vt-williston10a-95.bur.adelphia.net, 1
11/03/2003 06:26:03 PM, DNS non-Internet lookup, CM600-lcis2-38-105.cm.vtr.net, 1
11/03/2003 06:25:43 PM, DNS malformed, cable-68-114-126-226.sli.la.charter.com, 1
11/03/2003 06:25:18 PM, DNS non-Internet lookup, 144.13.224.246, 1
11/03/2003 06:25:08 PM, DNS malformed, adsl-068-153-134-210.sip.asm.bellsouth.net, 1
11/03/2003 06:25:08 PM, DNS non-Internet lookup, adsl-068-153-134-210.sip.asm.bellsouth.net, 1
11/03/2003 06:24:42 PM, DNS malformed, CPE00e0988522dd-CM014310113587.cpe.net.cable.rogers.com, 1
11/03/2003 06:24:37 PM, DNS non-Internet lookup, ptd-24-198-55-8.maine.rr.com, 2
11/03/2003 06:24:07 PM, DNS malformed, adsl-068-153-134-210.sip.asm.bellsouth.net, 1
11/03/2003 06:24:07 PM, DNS non-Internet lookup, adsl-068-153-134-210.sip.asm.bellsouth.net, 1
11/03/2003 06:23:52 PM, DNS non-Internet lookup, D8DKVN31, 1
11/03/2003 06:23:37 PM, DNS malformed, adsl-068-153-134-210.sip.asm.bellsouth.net, 2
11/03/2003 06:23:37 PM, DNS non-Internet lookup, adsl-068-153-134-210.sip.asm.bellsouth.net, 1
11/03/2003 06:23:21 PM, DNS non-Internet lookup, adsl-068-153-134-210.sip.asm.bellsouth.net, 1
11/03/2003 06:23:17 PM, DNS non-Internet lookup, 218-230-58-66.gci.net, 1
11/03/2003 06:23:06 PM, DNS non-Internet lookup, h0010b585890c.ne.client2.attbi.com, 1
11/03/2003 06:22:56 PM, DNS malformed, h009064ae2ce6.ne.client2.attbi.com, 1
11/03/2003 06:22:51 PM, DNS non-Internet lookup, CPE00e0988fe72e-CM013279901218.cpe.net.cable.rogers.com, 1


Sorry for the spam, needed to make a point. Heeeeeeeelp me. (In any way possible (if possible (please)))

Imp
Back to top
Darth Android
DragonOS Dev Team


Bandwidth Hog


Joined: 31 May 2003
Posts: 2104
Posted: 03 Nov 2003 06:42:19 pm    Post subject:
do you know what the ,1 after each address means? btw, adsl-* means a dsl line
Back to top
Toksyuryel
Crimson Dragon Software


Elite


Joined: 14 Jun 2003
Posts: 880
Posted: 03 Nov 2003 06:44:39 pm    Post subject:
Hmmm... you have 3 DNS's set up? You may want to check if those attacks all seem to be targeted at only one of your servers. You're only supposed to have two, and if someone hacked your computer and set up a third one it could be being used as a gateway to the others and you.

Mod note: Please move this to the general help and support forum.
Back to top
Toksyuryel
Crimson Dragon Software


Elite


Joined: 14 Jun 2003
Posts: 880
Posted: 03 Nov 2003 06:46:31 pm    Post subject:
Darth Android wrote:
do you know what the ,1 after each address means? btw, adsl-* means a dsl line

That represents how many times the server was attacted in succesive order by the same place.
Back to top
JoeImp
Enlightened


Active Member


Joined: 24 May 2003
Posts: 747
Posted: 03 Nov 2003 07:10:23 pm    Post subject:
Well, my first post was really just to find out what they were, but then it turned into a help thing. Hence my "heeeelp." If I can move my post I will.

Imp
Back to top
JacobdeHaan


Member


Joined: 10 Jul 2003
Posts: 165
Posted: 08 Nov 2003 03:58:00 am    Post subject:
Funny, this topic brings up and interesting idea I had.

Would it be possible to somehow make it that the computers on our home network had domain names? Like www.familycomp.com to access the family computer? In other words, could I host my own DNS server?
Back to top
AlienCC
Creative Receptacle!


Know-It-All


Joined: 24 May 2003
Posts: 1927
Posted: 08 Nov 2003 04:58:55 am    Post subject:
JacobdeHaan wrote:
Funny, this topic brings up and interesting idea I had.

Would it be possible to somehow make it that the computers on our home network had domain names? Like www.familycomp.com to access the family computer? In other words, could I host my own DNS server?

Yes it would be possible. First of all you would need to buy a couple domain names, have a constant internet connection, and also run a DNS service such as BIND constantly on all machines.

Is this really necessary?

No. Windows already ships with a built-in sharing protocol SMB which can be accessed from various other OS's (Linux, Unix, BSD, etc.). So with filesharing turned on your pc's you should be able to connect to each pc by simply typing in "\\machine1" or "\\machine2" in the address bar of explorer to connect up to the SMB shares on that PC. You may also connect to the local pc doing the same with its name.

To find out what the hostname is for each machine you can simply open up your trusty command prompt and type in "hostname" and you will be returned output that looks like this:
Quote:
C:\Documents and Settings\AlienCC>hostname
elfdesk

C:\Documents and Settings\AlienCC>
If I wanted to open explorer and browse that PC's shares from the command line I would simply type in:
Quote:
C:\Documents and Settings\AlienCC>start \\elfdesk

C:\Documents and Settings\AlienCC>
Hope this helps.

--AlienCC
Back to top
62 52 53 53
Formerly known as 62 52 53 53


Active Member


Joined: 30 May 2003
Posts: 607
Posted: 08 Nov 2003 05:10:56 pm    Post subject:
Of course, by finding an open browser in a language you know, you could code a small bit to link to other local network computers when you typed certain urls.

edit: maybe you could make it 'lan.familycomp', with a customizable list of urls/comps

Last edited by Guest on 08 Nov 2003 05:13:55 pm; edited 1 time in total
Back to top
JacobdeHaan


Member


Joined: 10 Jul 2003
Posts: 165
Posted: 08 Nov 2003 08:01:14 pm    Post subject:
Very cool guys. This almost works, but I have a problem when I try to access my server, it gives me this problem:

But it works fine when I type in http://localhost

edit: Also, if I did manage to set up BIND, would I have to own domain names just to get it to work on our home network?

Last edited by Guest on 08 Nov 2003 08:11:53 pm; edited 1 time in total
Back to top
62 52 53 53
Formerly known as 62 52 53 53


Active Member


Joined: 30 May 2003
Posts: 607
Posted: 09 Nov 2003 01:36:30 pm    Post subject:
unless you set something up as your own DNS, you would
Back to top
JoeImp
Enlightened


Active Member


Joined: 24 May 2003
Posts: 747
Posted: 10 Nov 2003 04:30:42 pm    Post subject:
I ran my virus scanner, and spy-ware scanner AGAIN, then I deleted a few process programs that I didnt think should be running, and it looks like the attacks pretty much stopped. I might get 5ish an hour now, from the 1 per 2 sec before. Thanks for replying everyone.

Imp
Back to top
Display posts from previous:   
Register to Join the Conversation
Have your own thoughts to add to this or any other topic? Want to ask a question, offer a suggestion, share your own programs and projects, upload a file to the file archives, get help with calculator and computer programming, or simply chat with like-minded coders and tech and calculator enthusiasts via the site-wide AJAX SAX widget? Registration for a free Cemetech account only takes a minute.

» Go to Registration page
Please Help - Dns Server?
    »
» View previous topic :: View next topic  
Page 1 of 1 » All times are UTC - 5 Hours

 

Advertisement