BIND logging to event viewer (windows)

Josh Hyles josh.maillists at gmail.com
Fri Oct 28 06:15:47 UTC 2005


Anyone?

On 10/25/05, Josh Hyles <josh.maillists at gmail.com> wrote:
> sorry for the delay in reply, i havent checked this email in forever,
> but here is the info you are asking about...
>
> zone theborgata.org/IN: refresh: retry limit for master
> 65.200.108.33#53 exceeded
> zone theborgata.org/IN: refresh: failure trying master
> 65.200.108.33#53: timed out
>
> Those are two exaples of messages I get. I dont know why it would
> error out as the machine is always up. But it would be nice if all
> this was logged to a file... here is the top of the config file as
> well...
>
> #
> # Example config created by SilentRage @ www.dollardns.net
> #
> # Requires:
> # http://www.dollardns.net/bind/named.ca
> # http://www.dollardns.net/bind/basiczone.com.zone
> # http://www.dollardns.net/bind/127.0.0.rev
> #
> options {
>        # Set the working directory from which all relative paths are based
>        # For the win2k default install: "C:\WINNT\system32\dns\etc"
>        #
>        directory "C:\WINDOWS\system32\dns\etc\zones";
>
>        # RECURSION - Required for caching servers
>        # Default: yes
>        # Values : yes, no
>        #
>        # yes: Attempt to resolve requests we are not authoritative for
>        # no : Do not resolve requests we are not authoritative for
>        #
>        recursion yes;
>
>        # ALLOW-RECURSION - Who may use our caching server?
>        # Default: any;
>        # Values : any, none, (addresslist)
>        #
>        # any    : anybody may use the caching server
>        # none   : noone may use the caching server
>        # address: List of IP addresses that may use the caching server.
>        #
>        #allow-recursion { 127/8; 192.168/16; 10/8; 172.24/12;
> 64.30.170.142/32; };
>        allow-recursion { any; };
>
>        # FORWARD - Recommended for caching servers
>        # Default: first
>        # Values : first, only
>        #
>        # first: Query "forwarders" first, then resolve request ourself
>        # only : Only query the "forwarders" to resolve requests
>        #
>        #forward first;
>
>        # FORWARDERS - Required if "forward" is used
>        # Default: (no forwarding)
>        # Values : (addresslist)
>        #
>        # It is recommended that you use your ISP's caching server addresses
>        # Example: forwarders { 127.0.0.1; 127.0.0.2; }
>        #
>        #forwarders { };
>
>        # QUERY SOURCE - Useful for caching servers behind a firewall
>        # Default: address * port *
>        # Values : The IP address and port to use as the source of queries to
> other servers
>        #
>        #query-source address * port 53;
>
>        # NOTIFY - Relevant to authoritative servers
>        # Default: yes
>        # Values : yes, explicit, no
>        #
>        # yes     : Send DNS NOTIFY messages to slave servers in zone NS
> records when zone changes
>        # explicit: Only send DNS NOTIFY messages to "also-notify" hosts
>        # no      : Never automatically send DNS NOTIFY messages
>        #
>        notify no;
> };
>
> # Setup query logging
> logging {
>        channel query_logging {
>                # Enable query logging by uncommenting the below
>                # Make sure to change the path to a valid directory
>                #
>                # version: number of backups created if size exceeded
>                # size   : maximum size of log file
>                #
>                file "C:\WINDOWS\system32\dns\etc\logs\query.log"
> versions 3 size 100M;
>
>                # Time stamp entries
>                #
>                print-time yes;
>        };
>        category queries {
>                query_logging;
>        };
>        category lame-servers { null; };
> };
>
>
>
> I dont see anything about logging to the event viewer, i do see the
> file it should be logging to though. any help is much appriciated.
> Thanks in advance.
>
> On 10/1/05, Danny Mayer <mayer at ntp.isc.org> wrote:
> > Josh Hyles wrote:
> > > Content-Type: text/plain; charset=ISO-8859-1
> > > Content-Transfer-Encoding: quoted-printable
> > > Content-Disposition: inline
> > > Every time I start/restart bind on my windows box it loads up Event viewer
> > > up with a million entries and I lose track of the entries for other
> > > programs. Does anyone know a way to make bind only log to a file? Currently
> > > it seems to only be logging queries to a file.
> > >
> > The real question here is why do you have a "million" entries? If you
> > have errors in your configuration or zone file you will get that. If you
> > told it to log certain activities and didn't direct them to a file you
> > will get that. If you don't want those activities logged change your
> > configuration file to turn them off.
> >
> > A) What's in the event log?
> >
> > B) What's in the configuration file?
> >
> > Danny
> >
> > > thanks in advance.
> > > Josh
> > >
> > >
> > >
> > >
> >
> >
>



More information about the bind-users mailing list