topic syslog.log is getting filled by DNS queries, how to disable it in Operating System - HP-UX

syslog.log is getting filled by DNS queries, how to disable it

phani_3 — Thu, 04 Dec 2003 17:26:47 GMT

Hi,

The syslog.log file is getting filled with DNS quries as follows, because of this syslog.log is getting keep on increaing in size, how to disable these messages.
Presently the syslog.log size is 60MB in my system.

Ex:
Dec 4 23:05:47 suboz018 named-xfer[9432]: [3.220.32.82] not authoritative for 9
9.218.3.IN-ADDR.ARPA, SOA query got rcode 0, aa 0, ancount 1, aucount 0

Looking forward for your prompt reply with solution...

Thanks,
Phani

Re: syslog.log is getting filled by DNS queries, how to disable it

Karthik S S — Thu, 04 Dec 2003 17:33:21 GMT

I would rather prefer to have a small script running on the system which will gunzip the syslog file and move it to different file name once in every week/month.

You can also use SAM to trim the syslog.

-Karthik S S

Re: syslog.log is getting filled by DNS queries, how to disable it

James A. Donovan — Thu, 04 Dec 2003 17:42:01 GMT

You'll need to modify your BIND configuration slightly by using the logging statement.

Take a look here for details on using the logging statement.

http://triton.process.com/bind-docs/logging.html

You could set up a category to send any message BIND generates anywhere....

Re: syslog.log is getting filled by DNS queries, how to disable it

Steven E. Protter — Thu, 04 Dec 2003 17:58:13 GMT

This issue can be made to go away by upgrading BIND tgo 9.2.x AND

making sure the DNS databases are exactly correct.

AND

pointing /etc/resolv.conf to a DNS server that is correct(see last item).

Somewhere in the DNS chain there is a bad zone record, or you are pointing to some outside server that can't answer requests for zones that are inside your firewall.

SEP