DNS related syslog message

[B.O. CHOI]

OS : hp-ux 11.0
Bind : named 4.9.7 2001 PHNE_23274

On our dns server's syslog.log, shown a message like below. I want to know the meaning of below message. and want to remove it.

# syslog.log message #
Jun 11 13:52:23 sschost named[1290]: sysquery: query(ns.kt-idc.com.donga.com) A RR negative cache entry (ns.kt-idc.com.donga.com:) learnt (NODATA=210.115.128.1:NS=211.63.213.176)

[Satish Y]

Hi,

It seems you have set ur default domain as "donga.com" and when any body types a hostname it will first check for the name as it is and if not found, appended with default domain name. Here in case like,

#telnet ns.kt-idc.com

So, it first checks for "ns.kt-idc.com", when not found for "ns.kt-idc.com.donga.com" and when both not found it is returning the above line.
Inorder to get rid of this u can change either domain name or introduce search list in your /etc/resolv.conf.like,

search donga.com kt-idc.com ......

Hope it helps u.

Cheers...
Satish.

[Vincenzo Restuccia]

See http://docs.hp.com/cgi-bin/fsearch/framedisplay?top=/hpux/onlinedocs/J2776-90008/J2776-90008_top.html&con=/hpux/onlinedocs/J2776-90008/00/00/20-con.html&toc=/hpux/onlinedocs/J2776-90008/00/00/20-toc.html&searchterms=named%5b1290%5d%3a%20sysquery%3a%20query&queryid=20010612-025524

[Satish Y]

one more thing i forgot to mention is check whether each MX and NS entry in ur db. file is appended with ".", if not u should do it.

Cheers...
Satish.