repetative queries

Mark.Andrews at nominum.com Mark.Andrews at nominum.com
Wed May 9 00:30:15 UTC 2001


	What also fixes it is to always use fully qualified names in
	config files and setting the hostname to be fully qualified.
	Make sure the fully qualified hostname is the official hostname
	in /etc/hosts, the unqualified form can be a alias.

	Mark

> 
> This is not really a BIND problem, or for that matter even a nameserver
> problem. Something on the box is expecting the hostname to be resolvable
> in DNS. Unfortunately, even with tools like "lsof", it's hard to track a
> local query back to a particular Unix process, because of the
> connectionless nature of UDP and the speed with which the query is
> initiated and completed.
> 
> My usual approach has been to start shutting down subsystems until the
> queries stop. Another, less intrusive approach, which in theory might
> work but I've never tried, is to make the query get "stuck" (e.g. set up
> a "type forward" zone pointing to machines which aren't running
> nameservers), and then maybe you could use something like "lsof" to
> track the source of the query back to a particular process. Another
> hit-or-miss method might be to have that name resolve to something bogus
> (e.g. 1.2.3.4) and see if any of the subsystems start squawking with "No
> route to network").
> 
> 
> - Kevin
> Michael McQuarrie wrote:
> 
> > Another config issue i'm sure...
> > I am running 8.2.3-REL on AIX 4.3.3. I keep getting
> > these queries coming from the server querying itself
> > in every form.  The odd part is that the server is not
> > defined anywhere as ilxdns01 except in the hostname of
> > the server.  None of the db files have ilxdns01 in
> > them.  The host file identifies the server as dns1.
> > When I do a nslookup the server is recognized as dns1.
> >  The server name is ilxdns01/dns1 and the internal ip
> > is 192.0.0.15.  Is this normal? How can I make this
> > stop?  Any help is greatly appreciated.
> >
> > 08-May-2001 08:05:16.475
> > XX+/192.0.0.15/ilxdns01.metriscompanies.com/A/IN
> > 08-May-2001 08:05:16.482 XX+/192.0.0.15/ilxdns01/A/IN
> > 08-May-2001 08:05:21.492 XX+/192.0.0.15/ilxdns01/A/IN
> > 08-May-2001 08:05:31.493 XX+/192.0.0.15/ilxdns01/A/IN
> > 08-May-2001 08:05:51.493 XX+/192.0.0.15/ilxdns01/A/IN
> > 08-May-2001 08:06:31.499
> > XX+/192.0.0.15/15.0.0.192.in-addr.arpa/PTR/IN
> >
> > __________________________________________________
> > Do You Yahoo!?
> > Yahoo! Auctions - buy the things you want at great prices
> > http://auctions.yahoo.com/
> 
> 
> 
> 
--
Mark Andrews, Nominum Inc.
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: Mark.Andrews at nominum.com


More information about the bind-users mailing list