[Unbound-users] multicast address alerts in logs
    bmanning at vacation.karoshi.com 
    bmanning at vacation.karoshi.com
       
    Sat Mar  5 05:39:55 UTC 2011
    
    
  
On Fri, Mar 04, 2011 at 08:56:17PM -0500, Michael Watters wrote:
> > That's not a multicast address; it's an (unusable) class-E 240/4 address.
> >
> > Weird to see traffic to it...
> >
> > Maybe someone has some bad glue?
> 
> That's entirely possible.  These servers are handling queries from
> thousands of servers and I'm sure that some domains have bad records.
> 
> Each server has interface tracking set to automatic and the anycast
> IPs are on loopback interfaces.  The messages don't seem to be causing
> any problems but I'd like to figure out what's causing them.
	there is a modification to unbound that allows it to
	use IPv4 multicast addreses to discover other DNS servers	
	there is also a patch for BIND that does the same thing.
	I thought I was pretty careful w/ the code and didn't think
	it had escaped into the wild.
	if there is anyone w/ logs they would be willing to share,
	I'd like to ensure it not my code doing this...
--bill
    
    
More information about the Unbound-users
mailing list