0
votes
1answer
63 views

Bind Requested DNS Server IP Log

I have a DNS Server which runs on a virtual linux box with several IPs. Bind provides some pretty detailed debug logs, however, one piece of information that doesn't seem to be logged is the requested ...
0
votes
1answer
72 views

rndc querylog - Can you specify log file other than messages?

When logging BIND requests using rndc querylog, the logging defaults to /var/log/messages. Is it possible to change this logging destination and specify my own log file?
1
vote
1answer
5k views

What is the meaning of these BIND log messages?

Please clarify for me the meaning of the following BIND messages in syslog, these are from a DNS resolver. Whilst I think I understand them, I don't know what all four mean, so I think it's best if ...
2
votes
2answers
14k views

Too many Bind query (cache) denied, DNS attack?

Once Bind crashed and I did: tail -f /var/log/messages I see a massive number of logs every second. Is this a DNS attack? or is there something wrong? Sometimes I see a domain in logs like this: ...
1
vote
0answers
317 views

Setting up bind9 9.7.3 logging: no size limitation, no file swapping

bind is configured to limit the log file size to 2m and to add up to 3 versions of the log files. During the testing of this bind server, is has occured that bind does not stop logging if the file ...
2
votes
1answer
69 views

How would I know the zone file from which the DNS query has been answered?

I have a BIND DNS Setup with several closely similar, yet different zone files with custom 'views' enabled. Is there a way I can log or find from which zone file [in the hundreds of zone files] has ...
0
votes
2answers
96 views

How can I log which interface a BIND query is received on?

I'm in the process of changing the IP address of my nameserver and I want a way to tell how many queries I am still receiving on the old IP address to track how well the change is being picked up. Is ...
2
votes
2answers
825 views

DNS - bind9 chroot jail - logging all queries

I have my BIND9 running under a chroot jail, however, I'm having difficulties trying to log all queries. I have bind under /var/chroot/bind9/ where I created a /var/chroot/bind9/var/log/ directory. ...
3
votes
2answers
1k views

Can I log specific queries on Bind 9?

I'd like to know which hosts make a specific DNS query, and at what times. Is there any way to get logs this specific on Bind 9? For example, I might want to log all A queries for xyzzy.net.
1
vote
1answer
145 views

How could a I make BIND 9 generate some log entries?

I am trying to figure out if I got my BIND server logging to a file correctly so that syslog-ng can read from named.log. Is there anyway to get BIND to generate some log entries to test it?
0
votes
1answer
1k views

Any way to filter IP's when logging queries? (BIND 9.3)

I would like to record queries to my DNS from a particular ip. Is this possible? Right now I have this: channel query_log { file "/var/named/data/queries.log" versions 2 size 1G; ...
4
votes
2answers
7k views

unreachable resolving domain

got a strange selection of errors in my logwatch that lists a 'network unreachable resolving nsX.somedomain.com' error repeatedly. This is on an Ubuntu 9.04 Server install with latest updates using ...