debian-security June 2011 archive
Main Archive Page > Month Archives  > debian-security archives
debian-security: Re: Logs errors on Debian Squeeze with Bind 9.7

Re: Logs errors on Debian Squeeze with Bind 9.7.3

From: Steve Suehring <steves_at_nospam>
Date: Tue Jun 28 2011 - 21:11:39 GMT
To: "OLCESE, Marcelo Oscar." <molcese@ancal.com.ar>

Hello,

Couple thoughts:

1) You should add semi-colons onto the end of the category lines within
the logging stanza.

2) I take it that you restarted bind after making changes in the
configuration file?

Also note that /etc/bind/namec.conf.options is the preferred place for
the logging stanza, or so I've gathered.

Steve
http://www.braingia.org/

On Tue, Jun 28, 2011 at 01:13:31PM -0300, OLCESE, Marcelo Oscar. wrote:
> Good morning people
> Since I upgraded to BIND 9.7.3 Debian 6, I'm having a lot of logs as
> I've outlined.
>
> error (network unreachable) resolving
> '98.31.207.117.in-addr.arpa/PTR/IN': 2001:500:13::73#53: 1 Time(s)
> error (network unreachable) resolving
> 'ABTS-mp-Dynamic-075.161.168.122.airtelbroadband.in/A/IN':
> 2001:500:45::1#53: 1 Time(s)
> error (network unreachable) resolving
> 'NSS2.CODETEL.NET.DO/AAAA/IN': 2001:468:d01:20::80df:2023#53: 1
> Time(s)
> error (network unreachable) resolving 'SEC3.APNIC.NET/A/IN':
> 2001:500:13::c7d4:35#53: 1 Time(s)
> error (unexpected RCODE REFUSED) resolving
> '222.187.173.122.in-addr.arpa/PTR/IN': 202.56.230.5#53: 1 Time(s)
> error (unexpected RCODE REFUSED) resolving
> '244.76.168.122.in-addr.arpa/PTR/IN': 202.56.230.6#53: 1 Time(s)
> error (unexpected RCODE REFUSED) resolving
> 'ns01.wl-infra.net/A/IN': 62.75.191.6#53: 2 Time(s)
> error (unexpected RCODE SERVFAIL) resolving 'ns6.kvack.org/A/IN':
> 199.249.120.1#53: 1 Time(s)
> error (unexpected RCODE SERVFAIL) resolving 'utn.edu.ar/NS/IN':
> 200.16.98.2#53: 1 Time(s)
> error (unexpected RCODE SERVFAIL) resolving
> 'zone-ns6.dnswl.org/A/IN': 199.249.120.1#53: 1 Time(s)
> success resolving
> 'ABTS-MP-Dynamic-073.132.175.122.airtelbroadband.in/A' (in
> 'airtelbroadband.in'?) after disabling EDNS: 1 Time(s)
> success resolving
> 'ABTS-North-Dynamic-222.187.173.122.airtelbroadband.in/A' (in
> 'airtelbroadband.in'?) after reducing the advertised EDNS UDP packet
> size to 512 octets: 1 Time(s)
> success resolving
> 'ABTS-North-Static-039.25.160.122.airtelbroadband.in/A' (in
> 'airtelbroadband.in'?) after disabling EDNS: 1 Time(s)
> success resolving 'dnsbom.mantraonline.com/AAAA' (in
> 'mantraonline.com'?) after disabling EDNS: 1 Time(s)
> success resolving 'dnsdel.mantraonline.com/A' (in
> 'mantraonline.com'?) after disabling EDNS: 1 Time(s)
>
> I already made several changes including:
>
> /etc/default/bind9
>
> Resolvconf = yes
> OPTIONS = "-4-u bind-S 1024"
>
> and named.conf:
>
> logging {
> category lame-servers {null;}
> category edns-disabled {null;}
> };
>
> Any ideas?
>
> Regards,
> Marcelo O.
>
>
> --
> To UNSUBSCRIBE, email to debian-security-REQUEST@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
> Archive: http://lists.debian.org/F0811723E5FB4D0A9D370D1D702B62D8@Marcelopc

-- To UNSUBSCRIBE, email to debian-security-REQUEST@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org Archive: http://lists.debian.org/20110628211139.GA11570@braingia.org