For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Samir_Jha_52506's avatar
Samir_Jha_52506
Icon for Noctilucent rankNoctilucent
Jan 24, 2017

Suspicious DNS Activity Originating from GTM Name Server

Hi All,

 

We are seeing continuous TCP packet reset error at client side from 3DNS name server. Search on GTM log & taken packet capture but no clue where rest packet is generating. From searching Google for similar issues, this seems to be related to an outdated/mis-configured Bind DNS server. Need your suggestion to close case.

 

Jan 05 00:04:51 x.x.0.100 named[23726]: dispatch 0x7ff06c4f4650: shutting down due to TCP receive error: xx.x.x.x53: connection reset

 

Jan 05 00:11:37 x.x.0.10 named[13320]: dispatch 0x7f78570f5ad0: shutting down due to TCP receive error: xx.x.x.x53: connection reset

 

Jan 05 00:14:14 x.x.0.10 named[13320]: dispatch 0x7f78570f5ad0: shutting down due to TCP receive error: xx.x.x.x53: connection reset

 

Jan 05 00:05:55 199.120.69.22 named[21101]: dispatch 0xb5436788: shutting down due to TCP receive error: xx.x.x.x53: connection reset

 

BIG-IP
BIG-IP DNS
security
No RepliesBe the first to reply