Peter Pentchev wrote:
i believe they're from sshd, yes. i'm not seeing any prior activity from the dnscache before the external tinydns is contacted.On Sun, Jan 05, 2003 at 12:55:48PM +0000, lemon wrote:# tcpdump -ni lo0 tcpdump: listening on lo0 [ 'wrong' listener being contacted ] 18:02:38.448117 192.168.1.2.1226 > 192.168.1.2.53: 24805+ PTR? 7.57.192.80.in-addr.arpa. (42) 18:02:43.452867 192.168.1.2.1227 > 192.168.1.2.53: 24805+ PTR? 7.57.192.80.in-addr.arpa. (42) 18:02:53.462937 192.168.1.2.1228 > 192.168.1.2.53: 24805+ PTR? 7.57.192.80.in-addr.arpa. (42) 18:03:13.473076 192.168.1.2.1229 > 192.168.1.2.53: 24805+ PTR? 7.57.192.80.in-addr.arpa. (42)Are you sure those connections are from the SSH daemon, and not from the dnscache itself?
sure, inline below. if it borks the mailer, it's also at:Can you post the full configuration of the tinydns and dnscache services, e.g. using Jonathan de Boyne Pollard's tinydns-showctl and dnscache-showctl utilities, available from http://homepages.tesco.net/~J.deBoynePollard/Softwares/djbdns.html Also, it would be very useful to see the full logfiles generated by dnscache and tinydns around the time of the unsuccessful lookups, and the exact contents of your /etc/resolv.conf file.
<http://www.lemonia.org/732/dns_info.txt>.
the two log tails were started at the same time, but the activity was seen in the tinydns log first, then the dnscache.
misconfiguration definately possible, i've been a bit off-kilter so far this year:) thanks for you help!This might turn out to be a trivial misconfiguration problem, or it might be a real getnameinfo(3) bug, but it would be much easier to find out with more information :)
regards, l.
--
[EMAIL PROTECTED] +44 020 8742 0755 www.aldigital.co.uk
system administrivia c6 h8 o7 www.thebunker.net
$ cat /etc/resolv.conf
search lemonia.org
nameserver 127.0.0.1
$ ./dnscache-showctl /var/dnscache
*************
/var/dnscache
*************
+++ Configuration options:
CACHESIZE:1000000
DATALIMIT:3000000
IP:127.0.0.1
IPSEND:0.0.0.0
ROOT:/var/dnscache/root
+++ Authorised client IP address prefixes:
127.0.0.1
+++ Hardwired content server IP addresses:
198.41.0.4
128.9.0.107
192.33.4.12
128.8.10.90
192.203.230.10
192.5.5.241
192.112.36.4
128.63.2.53
192.36.148.17
198.41.0.10
193.0.14.129
198.32.64.12
202.12.27.33
$ ./tinydns-showctl /var/tinydns
************
/var/tinydns
************
+++ Configuration options:
IP:192.168.1.2
ROOT:/var/tinydns/root
+++ Apices of those parts of the namespace that will be served up:
lemonia.org.
lemonia.org.
lemonia.org.
1.168.192.in-addr.arpa.
1.168.192.in-addr.arpa.
bash-2.05b# tail -f /var/tinydns/log/main/current
@400000003e1962c217d22ec4 d581481b:04ea:e4c1 - 000c 7.57.192.80.in-addr.arpa
@400000003e1962c71824f244 d581481b:04eb:e4c1 - 000c 7.57.192.80.in-addr.arpa
@400000003e1962d118be7af4 d581481b:04ec:e4c1 - 000c 7.57.192.80.in-addr.arpa
@400000003e1962e519596b04 d581481b:04ed:e4c1 - 000c 7.57.192.80.in-addr.arpa
bash-2.05b# tail -f /var/dnscache/log/main/current
@400000003e19630d1a1b190c query 39 7f000001:04ee:50b2 12 7.57.192.80.in-addr.arpa.
@400000003e19630d1a26928c cached ns 192.80.in-addr.arpa. ns2.cableinet.co.uk.
@400000003e19630d1a269e44 cached ns 192.80.in-addr.arpa. ns.ripe.net.
@400000003e19630d1a26a614 cached ns 192.80.in-addr.arpa. ns.cableinet.net.
@400000003e19630d1a26a9fc cached ns co.uk. ns1.nic.uk.
@400000003e19630d1a26ade4 cached ns co.uk. ns2.nic.uk.
@400000003e19630d1a26b1cc cached ns co.uk. ns-nom.pipex.net.
@400000003e19630d1a26b5b4 cached ns co.uk. sec-nom.dns.uk.psi.net.
@400000003e19630d1a26b99c cached 1 ns1.nic.uk.
@400000003e19630d1a26bd84 cached 1 ns2.nic.uk.
@400000003e19630d1a2707bc cached 1 ns-nom.pipex.net.
@400000003e19630d1a270ba4 cached 1 sec-nom.dns.uk.psi.net.
@400000003e19630d1a270f8c tx 1 1 ns2.cableinet.co.uk. co.uk. d94fa483 9e2b804a 9a20695a c342f082
@400000003e19630d1a9f643c rr d94fa483 172800 1 ns.cableinet.co.uk. c1267103
@400000003e19630d1aa1cd6c rr d94fa483 172800 ns cableinet.co.uk. ns.cableinet.co.uk.
@400000003e19630d1aa1d154 rr d94fa483 172800 ns cableinet.co.uk. ns2.cableinet.net.
@400000003e19630d1aa1d53c rr d94fa483 172800 ns cableinet.co.uk. ns3.cableinet.net.
@400000003e19630d1aa1dd0c stats 39 22438 1 0
@400000003e19630d1aa1dd0c cached 1 ns.cableinet.co.uk.
@400000003e19630d1aa1e0f4 cached 1 ns2.cableinet.net.
@400000003e19630d1aa1e4dc cached 1 ns3.cableinet.net.
@400000003e19630d1aa1e8c4 tx 1 1 ns2.cableinet.co.uk. cableinet.co.uk. c1267103 c2759855 c2759d04
@400000003e19630d1b4a6594 rr c1267103 28800 1 ns2.cableinet.co.uk. c2759d04
@400000003e19630d1b4cab9c rr c1267103 28800 1 ns2.cableinet.co.uk. c2759d04
@400000003e19630d1b4caf84 rr c1267103 28800 1 ns3.cableinet.co.uk. c2759855
@400000003e19630d1b4cb36c rr c1267103 28800 ns cableinet.co.uk. ns.cableinet.net.
@400000003e19630d1b4cb754 rr c1267103 28800 ns cableinet.co.uk. ns2.cableinet.co.uk.
@400000003e19630d1b4cbf24 rr c1267103 28800 ns cableinet.co.uk. ns3.cableinet.co.uk.
@400000003e19630d1b4cc30c stats 39 22635 1 0
@400000003e19630d1b4cc30c cached 1 ns.ripe.net.
@400000003e19630d1b4cc6f4 cached 1 ns.cableinet.net.
@400000003e19630d1b4d577c tx 0 12 7.57.192.80.in-addr.arpa. 192.80.in-addr.arpa. c10000c1 c2759d04 c1267103
@400000003e19630d1cb4de8c rr c2759d04 28800 ns 57.192.80.in-addr.arpa. ns.cableinet.net.
@400000003e19630d1cba9b4c rr c2759d04 28800 ns 57.192.80.in-addr.arpa. ns2.cableinet.co.uk.
@400000003e19630d1cbaa704 rr c2759d04 28800 ptr 7.57.192.80.in-addr.arpa. pc-80-192-57-7-az.blueyonder.co.uk.
@400000003e19630d1cbaaaec stats 39 22804 1 0
@400000003e19630d1cbbef24 sent 39 90
@400000003e19630d2baa564c query 40 7f000001:04ef:50b3 12 7.57.192.80.in-addr.arpa.
@400000003e19630d2bc6c3a4 cached 12 7.57.192.80.in-addr.arpa.
@400000003e19630d2bcd0d04 sent 40 90
@400000003e19630d2bcf6e64 query 41 7f000001:04f0:50b4 1 pc-80-192-57-7-az.blueyonder.co.uk.
@400000003e19630d2bd8b17c cached ns co.uk. ns1.nic.uk.
@400000003e19630d2bdaefb4 cached ns co.uk. ns2.nic.uk.
@400000003e19630d2bdc85f4 cached ns co.uk. ns-nom.pipex.net.
@400000003e19630d2bdf3d44 cached ns co.uk. sec-nom.dns.uk.psi.net.
@400000003e19630d2be11dbc cached 1 ns1.nic.uk.
@400000003e19630d2be2c39c cached 1 ns2.nic.uk.
@400000003e19630d2be46d64 cached 1 ns-nom.pipex.net.
@400000003e19630d2be60f5c cached 1 sec-nom.dns.uk.psi.net.
@400000003e19630d2bfa433c tx 0 1 pc-80-192-57-7-az.blueyonder.co.uk. co.uk. 9e2b804a d94fa483 c342f082 9a20695a
@400000003e19630d2cd96c24 rr 9e2b804a 172800 1 ns.blueyonder.co.uk. c3bc3572
@400000003e19630d2cdcf664 rr 9e2b804a 172800 1 ns2.blueyonder.co.uk. c3bc3571
@400000003e19630d2cdcfe34 rr 9e2b804a 172800 ns blueyonder.co.uk. ns.blueyonder.co.uk.
@400000003e19630d2cdd021c rr 9e2b804a 172800 ns blueyonder.co.uk. ns2.blueyonder.co.uk.
@400000003e19630d2cdd09ec rr 9e2b804a 172800 ns blueyonder.co.uk. ns3.cableinet.net.
@400000003e19630d2cdd0dd4 stats 41 23001 1 0
@400000003e19630d2cdd11bc cached 1 ns.blueyonder.co.uk.
@400000003e19630d2cdd15a4 cached 1 ns2.blueyonder.co.uk.
@400000003e19630d2cdd198c cached 1 ns3.cableinet.net.
@400000003e19630d2cddaa14 tx 0 1 pc-80-192-57-7-az.blueyonder.co.uk. blueyonder.co.uk. c2759855 c3bc3571 c3bc3572
@400000003e19630d2df6ab94 rr c2759855 28800 1 ns.blueyonder.co.uk. c3bc3572
@400000003e19630d2e027334 rr c2759855 28800 1 ns2.blueyonder.co.uk. c3bc3571
@400000003e19630d2e0286bc rr c2759855 28800 1 pc-80-192-57-7-az.blueyonder.co.uk. 50c03907
@400000003e19630d2e028aa4 rr c2759855 28800 ns blueyonder.co.uk. ns.blueyonder.co.uk.
@400000003e19630d2e029274 rr c2759855 28800 ns blueyonder.co.uk. ns2.blueyonder.co.uk.
@400000003e19630d2e02965c rr c2759855 28800 ns blueyonder.co.uk. ns3.cableinet.net.
@400000003e19630d2e029a44 stats 41 23260 1 0
@400000003e19630d2e05363c sent 41 68
To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-hackers" in the body of the message
