syslog.log is getting filled by DNS queries, how to disable it

[phani_3]

Hi,

The syslog.log file is getting filled with DNS quries as follows, because of this syslog.log is getting keep on increaing in size, how to disable these messages.
Presently the syslog.log size is 60MB in my system.

Ex:
Dec 4 23:05:47 suboz018 named-xfer[9432]: [3.220.32.82] not authoritative for 9
9.218.3.IN-ADDR.ARPA, SOA query got rcode 0, aa 0, ancount 1, aucount 0

Looking forward for your prompt reply with solution...

Thanks,
Phani

[Karthik S S]

I would rather prefer to have a small script running on the system which will gunzip the syslog file and move it to different file name once in every week/month.

You can also use SAM to trim the syslog.

-Karthik S S

[James A. Donovan]

You'll need to modify your BIND configuration slightly by using the logging statement.

Take a look here for details on using the logging statement.

http://triton.process.com/bind-docs/logging.html

You could set up a category to send any message BIND generates anywhere....

[Steven E. Protter]

This issue can be made to go away by upgrading BIND tgo 9.2.x AND

making sure the DNS databases are exactly correct.

AND

pointing /etc/resolv.conf to a DNS server that is correct(see last item).

Somewhere in the DNS chain there is a bad zone record, or you are pointing to some outside server that can't answer requests for zones that are inside your firewall.

SEP