How to Stop the "unexpected RCODE (SERVFAIL)" Messages?

imacat imacat at mail.imacat.idv.tw
Sat Feb 4 18:13:47 UTC 2006


Dear all,
    Hi.  I'm new here.  I'm running BIND 9.3.2, with sendmail on a same
box.  The "unexpected RCODE (SERVFAIL)" message is blowing up my syslog. 
Just tonight I heard my harddisk scratching hardly again.  I checked the
syslog.  There are 1277 "unexpected RCODE (SERVFAIL)" in one hour:

imacat at rinse ~ % grep 'unexpected RCODE (SERVFAIL)' /var/log/messages |
grep '^Feb  4 21:'
Feb  4 21:00:32 rinse named[2037]: unexpected RCODE (SERVFAIL) resolving
'194.183.255.216.in-addr.arpa/PTR/IN': 127.0.0.1#50053
Feb  4 21:00:34 leaf named[2008]: unexpected RCODE (SERVFAIL) resolving
'194.183.255.216.in-addr.arpa/PTR/IN': 168.95.1.1#53
...
imacat at rinse ~ % grep 'unexpected RCODE (SERVFAIL)' /var/log/messages |
grep '^Feb  4 21:' | wc -l
1277
imacat at rinse ~ % grep 'unexpected RCODE (SERVFAIL)' /var/log/messages |
grep '^Feb  4 21:00' | wc -l
24
imacat at rinse ~ %

    I searched the archive.  On Sep 2, 2004 Kevin Darcy said that these
are problems of others' name servers.  There is nothing I can do here. 
But, hey, this is my harddisk!  My syslog file is growing up enormously,
and I feel the life-span of my root harddisk shortened on every scratch. 
This is sort of DoS.  My heart aches on every such scratch~ >_<

    Is there any way I can suppress these messages?  These messages are
irrevelent to my system at all.  I would rather like to keep more
relevant information in my syslog, for ex, other type of failurs than
SERVFAIL, or even supress the whole 'unexpected RCODE'.  Or is there
something like the "limit" target in Linux iptables/netfilter that can
prevent my harddisk from blowing up?  Can anyone teach me how I can do
on this?  Thank you.

--
Best regards,
imacat ^_*' <imacat at mail.imacat.idv.tw>
PGP Key: http://www.imacat.idv.tw/me/pgpkey.txt

<<Woman's Voice>> News: http://www.wov.idv.tw/
Tavern IMACAT's: http://www.imacat.idv.tw/
TLUG List Manager: http://lists.linux.org.tw/cgi-bin/mailman/listinfo/tlug



More information about the bind-users mailing list