|
| Bind9 - query denied ?? Fra : Brian Ipsen |
Dato : 31-10-01 20:48 |
|
Hej!
Jeg får følgende i min log fra Bind9
named[4180]: loading configuration from '/etc/named.conf'
named[4180]: the default for the 'auth-nxdomain' option is now 'no'
named[4180]: no IPv6 interfaces found
named[4180]: listening on IPv4 interface lo, 127.0.0.1#53
named[4180]: listening on IPv4 interface eth0, 192.168.1.2#53
named[4180]: listening on IPv4 interface eth1, 192.168.225.184#53
named[4180]: command channel listening on 127.0.0.1#953
named[4180]: running
named: named startup succeeded
named[4180]: client 62.243.x.y#61402: query denied
named[4180]: client 62.243.x.y#61533: query denied
named[4180]: client 62.243.x.y#61402: query denied
named[4180]: client 62.243.x.y#61534: query denied
named[4180]: dynamic update failed: 'RRset exists (value dependent)'
prerequisite not satisfied (NXRRSET)
named[4180]: client 212.242.228.96#17982: query denied
Hvad er det for nogle "query denied" linier ?? nslookup virker fint
udefra, og zonetransfer virker også til de hosts, som har tilladelse
til det.... (lavet med acl)
/Brian
| |
Brian Ipsen (31-10-2001)
| Kommentar Fra : Brian Ipsen |
Dato : 31-10-01 21:11 |
|
On Wed, 31 Oct 2001 20:47:32 +0100, Brian Ipsen <Spammers@blow.me>
wrote:
>named[4180]: loading configuration from '/etc/named.conf'
>named[4180]: the default for the 'auth-nxdomain' option is now 'no'
>named[4180]: no IPv6 interfaces found
>named[4180]: listening on IPv4 interface lo, 127.0.0.1#53
>named[4180]: listening on IPv4 interface eth0, 192.168.1.2#53
>named[4180]: listening on IPv4 interface eth1, 192.168.225.184#53
>named[4180]: command channel listening on 127.0.0.1#953
>named[4180]: running
>named: named startup succeeded
>named[4180]: client 62.243.x.y#61402: query denied
>named[4180]: client 62.243.x.y#61533: query denied
>named[4180]: client 62.243.x.y#61402: query denied
>named[4180]: client 62.243.x.y#61534: query denied
>named[4180]: dynamic update failed: 'RRset exists (value dependent)'
>prerequisite not satisfied (NXRRSET)
>named[4180]: client 212.242.228.96#17982: query denied
Jeg fandt følgende:
zone alpenrebellen-fanclub-struer.dk/IN: notify to 62.243.x.y#53
failed: unexpected end of input
Og den sekundære server på 62.243.x.y har (i starten af DNS-filen):
; BIND version named 8.2.3-REL Sat Jan 27 05:11:05 EST 2001
; BIND version
prospector@porky.devel.redhat.com:/usr/src/bs/BUILD/bind-8.2.3/src/bin/named
; zone 'alpenrebellen-fanclub-struer.dk' last serial 12
; from 62.242.z.x:53 (local 172.16.1.2) using AXFR at Tue Jul 3
17:25:44 2001
$ORIGIN dk.
alpenrebellen-fanclub-struer 38400 IN SOA ns2.xx.dk.
andebakken.dk. (
Hjælper det ???
/Brian
| |
|
|