DNS---checking local user request in syslog

[Rgomes]

Hi All,

I get only "lame server resolving" in syslog.

Nov 9 11:22:26 dns2 named[23396]: lame server resolving '247.138.91.203.in-addr.arpa' (in '138.91.203.in-addr.arpa'?): 203.91.143.20#53
Nov 9 11:22:39 dns2 named[23396]: lame server resolving 'yahoo.co.in' (in 'in'?): 137.39.1.3#53
Nov 9 11:22:35 dns2 named[23396]: lame server resolving '247.138.91.203.in-addr.arpa' (in '138.91.203.in-addr.arpa'?): 203.91.143.19#53
Nov 9 11:22:36 dns2 named[23396]: lame server resolving '247.138.91.203.in-addr.arpa' (in '138.91.203.in-addr.arpa'?): 203.91.143.20#53
Nov 9 11:23:05 dns2 named[23396]: lame server resolving '27.142.60.69.in-addr.arpa' (in '142.60.69.in-addr.arpa'?): 198.78.128.128#53
Nov 9 11:23:06 dns2 named[23396]: lame server resolving '27.142.60.69.in-addr.arpa' (in '142.60.69.in-addr.arpa'?): 198.78.129.129#53


How can I enable(??) BIND 9.2, to log local user requests also.

Thanks in advance.

Richard

[Rgomes]

Sorry for my double posting.

Richard

[U.SivaKumar_2]

Hi,

This is because of incorrect delegation . you can do nothing about this unless you are authoritative of that in-addr.arpa domain.

All you can do is to contact the administrator of the problematic domain and request him to check his delegation config.

regards,

U.SivaKumar.

[Rgomes]

Thanks SivaKumar,

Yah I understand that. But, how can I configure BIND 9.2 to log all( I mean, ALL) king of request it gets. I need to check what sorts of request it's getting before moving to production.

Thanks
Richard

[U.SivaKumar_2 · Accepted solution]

Hi,

Edit named.conf

logging {

channel query_logging {
file "/var/adm/syslog/dnsquerylog"
versions 3 size 500M;
print-time yes;
};

category queries {
query_logging;
};
};

Restart named.

This will logs all DNS activity in /var/adm/syslog/dnsquerylog file. Please note that this is I/O intensive and will affect performance depending upon the DNS load.

regards,

U.SivaKumar.

[Rgomes]

Hi Sivakumar,

THANKS!!

Richard