Question : Suspicious Localhost PTR Record Response

Need a help with this event from tipping point unity one
5300: DNS: Suspicious Localhost PTR Record Response
can anyone tell me what it exactly means.

Answer : Suspicious Localhost PTR Record Response

I would double-check with your Tipping Point documentation on the Event ID to be sure as this support information does not appear to be readily available on the Internet.  Without guess, we do know that typically DNS servers have an entry for 'localhost' that points to the IP address of 127.0.0.1 which is reserved and used for troubleshooting and connecting to your local PC.  Perhaps the DNS server received a request to update the localhost record to something besides 127.0.0.1...?  Maybe some additional information is available in the event as well.

Hope this helps...

Mike
Random Solutions  
 
programming4us programming4us