저희 서버의 네임서버 부분이 계속 죽습니다.
아래는 로그방의 메시지 로그입니다. 제가 의심나는 부분만 잘랐습니다.
아래 보면 스캔이 나오는데 누가 계속 건드리는 것이 아닌지요.
네임 데몬이 죽어서 난리입니다.
아무리 봐도 이해가 안가서...
  Apr  3 01:45:58 happythink scandetd: port 1350 connection attempt from 211.217.179.111  <--250줄 나옴
 Apr  3 08:58:30 happythink named[3409]: Lame server on '137.30.233.211.in-addr.arpa' (in '30.233.211.in-addr.arpa'?): 
[203.248.250.25].53 'ns2.kidc.net'  Apr  3 08:59:05 happythink scandetd: domain connection attempt from 207.43.160.3
Apr  3 08:59:33 happythink scandetd: domain connection attempt from 203.197.249.45
 Apr  3 09:04:18 happythink sendmail[29049]: unable to dlopen /usr/lib/sasl/libdigestmd5.so: /usr/lib/sasl/libdigestmd5
.so: undefined symbol: RC4_set_key   Apr  3 10:01:22 happythink kernel: eth0: Transmit timeout, status 0d 0000 media 18
. Apr  3 10:01:22 happythink kernel: eth0: Tx queue start entry 3247091  dirty entry 3247087.
   여기까지   Lame server on '3.129.204.210.in-addr.arpa' 이런게 없구요. 다 www scantd 이런것만 있네
요.  Apr  3 10:32:27 happythink  4월  3 10:32:27 named: named shutdown failed
Apr  3 10:32:27 happythink named[1885]: starting.  named 8.2.2-P5 Tue Apr 18 17:42:07 EDT 2000 ^Iroot at porky.devel.redh
at.com:/usr/src/bs/BUILD/bind-8.2.2_P5/src/bin/named Apr  3 10:32:27 happythink named[1885]: hint zone "" (IN) loaded (
serial 0)  Apr  3 10:32:27 happythink named[1885]: Zone "0.0.127.in-addr.arpa" (file named.local): No default TTL set u
sing SOA minimum instead Apr  3 10:32:27 happythink named[1885]: master zone "0.0.127.in-addr.arpa" (IN) loaded (serial
 1997022700) Apr  3 10:33:33 happythink named[2063]: Zone "cklook.com" (file zone-cklook.com): No default TTL set using
 SOA minimum instead Apr  3 10:33:33 happythink named[2063]: zone-cklook.com:8: Priority error near (mail.mnara.net.)
Apr  3 10:33:33 happythink named[2063]: zone-cklook.com:13: Priority error near (mail.mnara.net.)
Apr  3 10:33:33 happythink named[2063]: zone-cklook.com:16: Priority error near (mail.mnara.net.)
Apr  3 10:33:33 happythink named[2063]: zone-cklook.com:19: Priority error near (mail.mnara.net.)
Apr  3 10:33:33 happythink named[2063]: master zone "cklook.com" (IN) rejected due to errors (serial 2000120401)
 Apr  3 10:33:33 happythink named[2063]: master zone "n-clean.co.kr" (IN) loaded (serial 2000122901)
Apr  3 10:33:33 happythink named[2063]: Zone "designntop.com" (file zone-designntop.com): No default TTL set using SOA 
minimum instead Apr  3 10:33:34 happythink named[2063]: master zone "designntop.com" (IN) loaded (serial 2000122901)
Apr  3 10:33:34 happythink named[2063]: Zone "naircon.co.kr" (file zone-naircon.co.kr): No default TTL set using SOA mi
nimum instead Apr  3 10:33:34 happythink named[2063]: master zone "naircon.co.kr" (IN) loaded (serial 2000122901)
Apr  3 10:33:34 happythink named[2063]: Zone "ylem.happythink.net" (file zone-ylem.happythink.net): No default TTL set 
using SOA minimum instead Apr  3 10:33:34 happythink named[2063]: master zone "ylem.happythink.net" (IN) loaded (serial
 2000122902) Apr  3 10:33:34 happythink named[2063]: Zone "dsdv.co.kr" (file zone-dsdv.co.kr): No default TTL set using
 SOA minimum instead Apr  3 10:33:34 happythink named[2063]: master zone "dsdv.co.kr" (IN) loaded (serial 2000122901)
Apr  3 10:33:34 happythink named[2063]: Zone "resiteok.com" (file zone-resiteok.com): No default TTL set using SOA mini
mum instead Apr  3 10:33:34 happythink named[2063]: master zone "resiteok.com" (IN) loaded (serial 2000122901)
Apr  3 10:33:34 happythink named[2063]: Zone "resiteok.net" (file zone-resiteok.net): No default TTL set using SOA mini
mum instead Apr  3 10:33:34 happythink named[2063]: master zone "resiteok.net" (IN) loaded (serial 2000122901)
Apr  3 10:33:34 happythink named[2063]: Zone "resiteok.co.kr" (file zone-resiteok.co.kr): No default TTL set using SOA 
minimum instead Apr  3 10:33:34 happythink named[2063]: master zone "resiteok.co.kr" (IN) loaded (serial 2000122901)
Apr  3 10:33:34 happythink named[2063]: Zone "yonpro.com" (file zone-yonpro.com): No default TTL set using SOA minimum 
instead Apr  3 10:33:34 happythink named[2063]: master zone "yonpro.com" (IN) loaded (serial 2000122901)
Apr  3 10:33:34 happythink named[2063]: db_load could not open: zone-nmare.com: 그런 파일이나 디렉토리가 없
음 Apr  3 10:33:34 happythink named[2063]: Zone "236.243.203.in-addr.arpa" (file zone-236.243.203): No default TTL set
 using SOA minimum instead Apr  3 10:33:34 happythink named[2063]: Zone "236.243.203.in-addr.arpa" (file zone-236.243.2
03): no SOA RR found Apr  3 10:33:34 happythink named[2063]: master zone "236.243.203.in-addr.arpa" (IN) rejected due t
o errors (serial 0) Apr  3 10:33:34 happythink named[2063]: listening on [127.0.0.1].53 (lo)
Apr  3 10:33:34 happythink named[2063]: listening on [203.243.236.195].53 (eth0)
Apr  3 10:33:34 happythink named[2063]: Forwarding source address is [0.0.0.0].2466
Apr  3 10:33:34 happythink  4월  3 10:33:34 named: named startup succeeded
Apr  3 10:33:34 happythink named[2068]: group = 25
Apr  3 10:33:34 happythink named[2068]: user = named
Apr  3 10:33:34 happythink named[2068]: Ready to answer queries.
Apr  3 10:33:36 happythink  4월  3 10:33:36 PAM_pwdb[1771]: (su) session closed for user root
Apr  3 10:33:38 happythink named[2068]: Lame server on 'hamail.net' (in 'hamail.net'?): [168.95.1.1].53 'DNS.HINET.NET'
Apr  3 10:33:38 happythink PAM_pwdb[1734]: (login) session closed for user reserch
Apr  3 10:33:38 happythink inetd[498]: pid 1733: exit status 1
 Apr  3 10:43:18 happythink named[2068]: sysquery: findns error (NXDOMAIN) on ns.hosting.happythink.net?
Apr  3 10:43:19 happythink named[2068]: sysquery: findns error (NXDOMAIN) on ns.21c.sg21c.com?
 Apr  3 10:47:07 happythink named[2068]: bad referral (. !< 71.63.211.in-addr.arpa)
  Apr  3 10:49:05 happythink named[2068]: sysquery: findns error (NXDOMAIN) on ns.ylem.happythink.net?
Apr  3 10:53:33 happythink named[2068]: sysquery: findns error (NXDOMAIN) on ns.21c.sg21c.com?
 Apr  3 11:33:23 happythink named[2068]: Lame server on 'hanamail.net' (in 'hanamail.net'?): [203.228.13.10].53 'NS.KOR
TEX.CO.KR' Apr  3 11:33:24 happythink named[2068]: Lame server on 'hanamail.net' (in 'hanamail.net'?): [211.107.155.178
].53 'NS1.FREEDNS.CO.KR' Apr  3 11:33:24 happythink named[2068]: Lame server on 'hamail.net' (in 'hamail.net'?): [209.9
2.33.150].53 'DNS2.DOMAINBANK.NET' Apr  3 11:33:24 happythink named[2068]: Lame server on 'hamail.net' (in 'hamail.net'
?): [168.95.1.2].53 'VNS2.HINET.NET' Apr  3 11:33:25 happythink named[2068]: Lame server on 'hamail.net' (in 'hamail.ne
t'?): [168.95.1.1].53 'DNS.HINET.NET' Apr  3 11:33:29 happythink named[2068]: Lame server on 'hanmile.net' (in 'hanmile
.net'?): [63.122.61.10].53 'NS1.POPULARCATEGORIES.COM' Apr  3 11:33:30 happythink named[2068]: Lame server on 'hanmile.
net' (in 'hanmile.net'?): [63.122.61.11].53 'NS2.POPULARCATEGORIES.COM' Apr  3 11:33:30 happythink named[2068]: ns_forw
: query(hanamail.net) All possible A RR's lame Apr  3 11:33:32 happythink named[2068]: Lame server on 'naver.net' (in '
: naver.net'?): [203.241.132.103].53 'NAVER2.NEWSNAVER.COM'
Apr  3 11:33:32 happythink named[2068]: Lame server on 'ns.miriman.CO.KR' (in 'miriman.co.kr'?): [211.52.115.61].53 'cy
ber.miriman.co.kr' Apr  3 11:33:32 happythink named[2068]: Lame server on 'ns.miriman.CO.KR' (in 'miriman.co.kr'?): [21
1.52.115.60].53 'home.miriman.co.kr' Apr  3 11:33:33 happythink named[2068]: Cleaned cache of 32 RRsets
Apr  3 11:33:33 happythink named[2068]: USAGE 986265213 986261614 CPU=0.57u/0.26s CHILDCPU=0u/0s
Apr  3 11:33:33 happythink named[2068]: NSTATS 986265213 986261614 A=304 PTR=2268 MX=88 ANY=166
Apr  3 11:33:33 happythink named[2068]: XSTATS 986265213 986261614 RR=1069 RNXD=332 RFwdR=646 RDupR=7 RFail=37 RFErr=0 
RErr=0 RAXFR=0 RLame=192 ROpts=0 SSysQ=230 SAns=2267 SFwdQ=509 SDupQ=358 SErr=0 RQ=2828 RIQ=0 RFwdQ=0 RDupQ=55 RTCP=0 SF
wdR=646 SFail=2 SFErr=0 SNaAns=2156 SNXD=1359 Apr  3 11:35:37 happythink named[2068]: Lame server on '120.10.73.61.in-a
ddr.arpa' (in '10.73.61.in-addr.arpa'?): [168.126.63.1].53 'ns.kornet.net' Apr  3 11:35:37 happythink named[2068]: Lame
 server on '120.10.73.61.in-addr.arpa' (in '10.73.61.in-addr.arpa'?): [168.126.63.2].53 'ns2.kornet.net' Apr  3 11:37:3
4 happythink named[2068]: Lame server on '1.18.99.152.in-addr.arpa' (in '99.152.in-addr.arpa'?): [134.75.30.1].53 'NS.KR
EONET.RE.KR' Apr  3 11:37:34 happythink named[2068]: Lame server on '1.18.99.152.in-addr.arpa' (in '99.152.in-addr.arpa
'?): [152.99.1.6].53 'NS.GCC.GO.KR' Apr  3 11:38:09 happythink named[2068]: sysquery: findns error (NXDOMAIN) on ns.yle
m.happythink.net?  Apr  3 12:24:39 happythink scandetd: port 2530 connection attempt from 211.51.35.93  <--- 포트가
 바꿔가며 130여번 나옴  Apr  3 07:37:22 happythink proftpd[24835]: happythink.net (211.237.240.59[211.237.240.5
9]) - FTP session closed.  Apr  3 08:57:13 happythink named[3409]: Lame server on '3.129.204.210.in-addr.arpa' (in '204
.210.in-addr.arpa'?): [202.30.50.50].53 'ns.krnic.net' Apr  3 08:57:13 happythink named[3409]: Lame server on '3.129.20
4.210.in-addr.arpa' (in '204.210.in-addr.arpa'?): [134.75.30.1].53 'ns.kreonet.re.kr' Apr  3 08:57:13 happythink named[
3409]: Lame server on '3.129.204.210.in-addr.arpa' (in '204.210.in-addr.arpa'?): [147.46.82.48].53 'ns.kren.ne.kr' Apr 
 3 08:57:38 happythink named[3409]: Lame server on '131.48.178.210.in-addr.arpa' (in '178.210.in-addr.arpa'?): [168.126.
63.1].53 'ns.kornet.ne.kr' Apr  3 08:58:30 happythink named[3409]: Lame server on '137.30.233.211.in-addr.arpa' (in '30
.233.211.in-addr.arpa'?): [203.248.250.25].53 'ns2.kidc.net' Apr  3 09:04:18 happythink sendmail[29049]: unable to dlop
en /usr/lib/sasl/libdigestmd5.so: /usr/lib/sasl/libdigestmd5.so: undefined symbol: RC4_set_key--헬프미~~