here your have an bind log example, WITH lame server logging.
Adjust where needed.
Just enable only lameserver logging.
Set all to null and enable lameserver logging.
No performance drop.
logging {
channel bind_log {
file "/var/log/bind/bind.log" versions 3 size 1m;
severity info;
print-category yes;
print-severity yes;
print-time yes;
};
channel query_log {
file "/var/log/bind/query.log" size 1m;
// Set the severity to dynamic to see all the debug messages.
severity debug 3;
};
channel update_debug {
file "/var/log/bind/update_debug.log" versions 3 size 100k;
severity debug;
print-severity yes;
print-time yes;
};
channel security_info {
file "/var/log/bind/security_info.log" versions 1 size 100k;
severity info;
print-severity yes;
print-time yes;
};
channel xfer_log {
file "/var/log/bind/xfer.log" size 1m;
print-category yes;
print-severity yes;
print-time yes;
severity info;
};
channel unmatched_log {
file "/var/log/bind/unmatched.log" size 1m;
print-category yes;
print-severity yes;
print-time yes;
severity info;
};
channel lameservers_log {
file "/var/log/bind/lameservers.log" size 1m;
print-category yes;
print-severity yes;
print-time yes;
severity info;
};
category default { bind_log; };
category lame-servers { lameservers_log; };
category update { update_debug; };
category update-security { update_debug; };
category security { security_info; };
category queries { query_log; };
//category unmatched { unmatched_log; };
category xfer-in { xfer_log; };
category xfer-out { xfer_log; };
// No logging at all ..
// category default { null; };
};
> -----Oorspronkelijk bericht-----
> Van: m...@junc.eu [mailto:owner-postfix-us...@postfix.org] Namens Benny
> Pedersen
> Verzonden: woensdag 13 juli 2016 11:48
> Aan: postfix-users@postfix.org
> Onderwerp: Re: This ought to be simple to stop. Am I missing something?
>
> On 2016-07-13 11:41, L.P.H. van Belle wrote:
>
> > recommend using your own DNS servers when doing DNSBL queries to
> > Spamhaus.
>
> using ::1 here i dont trust others
>
> > I no lame servers in my bind logs.
> > The set below is running over 1 year now, without any problems.
>
> bind9 default dont log lame-servers, since there is none that if enabled
> will fill logs pretty fast and it will drop bind9 performance aswell
