In message <[EMAIL PROTECTED]>, Scott Haneda writ
es:
> On Nov 19, 2008, at 6:19 PM, Kevin Darcy wrote:
>
> Here is another example, I think not a reverse lookup for sure:
> 20-Nov-2008 00:36:38.470 lame-servers: info: lame server resolving
> 'szi.szi.sv.gov.yu' (in 'szi.sv.gov.yu'?): 195.178.32.2#53
>
> Doesn't that mean that 195.178.32.2 requested a lookup from my NS for
> szi.szi.sv.gov.yu? I have an email server, and a bunch of web
> servers, the web servers do not have DNS lookups on, so those are not
> asking anything of my DNS server. The only thing that should be, is
> the email server, but that is not adding up, since I do not have
> reverse lookup checking enabled.
No. 195.178.32.2 is ns3.nic.yu which is lame (not serving)
the zone it is listed as serving.
szi.sv.gov.yu. 86400 IN NS ns3.nic.yu.
szi.sv.gov.yu. 86400 IN NS odisej.telekom.yu.
szi.sv.gov.yu. 86400 IN NS ns.szi.sv.gov.yu.
szi.sv.gov.yu. 86400 IN NS ns1.nic.yu.
;; Received 185 bytes from 147.91.8.6#53(NS1.NIC.yu) in 147 ms
szi.sv.gov.yu. 74897 IN NS ns1.nic.yu.
szi.sv.gov.yu. 74897 IN NS ns3.nic.yu.
szi.sv.gov.yu. 74897 IN NS odisej.telekom.yu.
szi.sv.gov.yu. 74897 IN NS ns.szi.sv.gov.yu.
;; Received 185 bytes from 195.178.32.2#53(ns3.nic.yu) in 163 ms
> I can think of one thing, which is my web stats server, which I would
> think, does resolve IP's to host names, in order to show a report of
> what domains are going to websites. That being said, I would think,
> that I should see the source of the query IP in the lame server log
> line.
Why? The log is there so you know which lookup (by name)
is failing and which server is broken.
> Is there a way to log the client IP on that line?
No. At this depth named doesn't care which client asked.
It's resolving the query for all clients that ask for that
name and type. When it has a answer it will send the
response back. All the resolver has is a function to send
the callback data to.
Mark
> Thanks
> --
> Scott
>
> _______________________________________________
> bind-users mailing list
> bind-users@lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
--
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742 INTERNET: [EMAIL PROTECTED]
_______________________________________________
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users
