How to Stop the "unexpected RCODE (SERVFAIL)" Messages?

imacat imacat at
Sat Feb 4 18:13:47 UTC 2006

Dear all,
    Hi.  I'm new here.  I'm running BIND 9.3.2, with sendmail on a same
box.  The "unexpected RCODE (SERVFAIL)" message is blowing up my syslog. 
Just tonight I heard my harddisk scratching hardly again.  I checked the
syslog.  There are 1277 "unexpected RCODE (SERVFAIL)" in one hour:

imacat at rinse ~ % grep 'unexpected RCODE (SERVFAIL)' /var/log/messages |
grep '^Feb  4 21:'
Feb  4 21:00:32 rinse named[2037]: unexpected RCODE (SERVFAIL) resolving
Feb  4 21:00:34 leaf named[2008]: unexpected RCODE (SERVFAIL) resolving
imacat at rinse ~ % grep 'unexpected RCODE (SERVFAIL)' /var/log/messages |
grep '^Feb  4 21:' | wc -l
imacat at rinse ~ % grep 'unexpected RCODE (SERVFAIL)' /var/log/messages |
grep '^Feb  4 21:00' | wc -l
imacat at rinse ~ %

    I searched the archive.  On Sep 2, 2004 Kevin Darcy said that these
are problems of others' name servers.  There is nothing I can do here. 
But, hey, this is my harddisk!  My syslog file is growing up enormously,
and I feel the life-span of my root harddisk shortened on every scratch. 
This is sort of DoS.  My heart aches on every such scratch~ >_<

    Is there any way I can suppress these messages?  These messages are
irrevelent to my system at all.  I would rather like to keep more
relevant information in my syslog, for ex, other type of failurs than
SERVFAIL, or even supress the whole 'unexpected RCODE'.  Or is there
something like the "limit" target in Linux iptables/netfilter that can
prevent my harddisk from blowing up?  Can anyone teach me how I can do
on this?  Thank you.

Best regards,
imacat ^_*' <imacat at>
PGP Key:

<<Woman's Voice>> News:
Tavern IMACAT's:
TLUG List Manager:

More information about the bind-users mailing list