Hi Dave,
I've been getting the below message for a couple of days now and just looking for a little insight. I do the DNS and, as you can see, the *denied update* shows it's the correct version of bind on my Raq3. I have added the offending IP to hosts.allow, did a */etc/rc.d/init.d/inet restart* then added the IP to the route table.
Don't do that; this is (most probably) a valid customer. He's running Windows 2000. I don't run it and forgot what setting this is. It can be remedied on the customer's side.
Is this harmless so I can add to logcheck.ignore?
Yes, AFAIK. Good luck... Nico