Solved

Large amount of DNS event 5501 in event logs

Posted on 2010-09-23
4
1,181 Views
Last Modified: 2013-12-05
I've got a 2000 Domain controller with a lot of 5501 events happening. The bad packets are coming from a particular IP, based in Austria.
I realise that the event is just informational, but I'm concerend that this one IP is maliciously sending malformed packets, and it's slowing down my DSN server.
Can anyone give me a good way to deal with it?
0
Comment
Question by:lineonecorp
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
4 Comments
 
LVL 7

Accepted Solution

by:
Christopher Martinez earned 150 total points
ID: 33746185
Do you have a ACL/IPSec setup? If so i would make sure that this IP is filtered to ignore all request.

If you would lik emore info on doing this i suggest this article
http://support.microsoft.com/kb/813878
Good luck!
0
 
LVL 26

Assisted Solution

by:DrDave242
DrDave242 earned 150 total points
ID: 33755567
If the packets are all coming from one IP outside your network, and you have no idea what that IP is or why it would be sending those packets, you should consider blocking it at your firewall.  You should also consider upgrading that DC, as Windows 2000 reached end-of-life in July, so MS will no longer provide support for it.

0
 

Author Comment

by:lineonecorp
ID: 33772596
I will read the article and get back to you.
0
 

Author Closing Comment

by:lineonecorp
ID: 33775629
Thanks for the suggestions
0

Featured Post

Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Remote Apps is a feature in server 2008 which allows users to run applications off Remote Desktop Servers without having to log into them to run the applications.  The user can either have a desktop shortcut installed or go through the web portal to…
There have been a lot of times when we have seen the need to enter a large number of DNS entries in a forward lookup zone. The standard procedure would be to launch the DNS Manager console, create the Zone and start adding new hosts using the New…
This video Micro Tutorial shows how to password-protect PDF files with free software. Many software products can do this, such as Adobe Acrobat (but not Adobe Reader), Nuance PaperPort, and Nuance Power PDF, but they are not free products. This vide…
In this video, viewers will be given step by step instructions on adjusting mouse, pointer and cursor visibility in Microsoft Windows 10. The video seeks to educate those who are struggling with the new Windows 10 Graphical User Interface. Change Cu…

729 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question