question about blocking specific log entries.

[Chris Buxton]

Firstly, with that much traffic, do not log queries to the same log  
file as anything else. Set up logging to send query logs to a  
dedicated query log file.

Secondly, no, you can't log these messages separately from the other  
security category messages. However, you can give whatever channel  
your security category goes to a severity threshold of notice or  
higher; that will stop these. (At least, in my 9.4.2-P2 installation,  
these messages are logged as security/info.)

Chris Buxton
Professional Services
Men & Mice

On Oct 16, 2008, at 10:14 AM, Shawn Somers wrote:

> How do I keep these entries from being logged?
>
> -------------------
>  named[27910]: client 10.57.1.229#56074: query
> '1.0.0.127.dnsbugtest.1.0.0.127.in-addr.arpa/PTR/IN' denied
> -------------------
>
> These appear to be coming from Apple computers, or windows PC's with
> bonjour installed. and they're annoying, to say the least.
>
> With 8K Query's/second, the logs contain very little in the way of
> actual, useful data.
>
> -- 
> Shawn Somers
> Systems Administrator
> Skynet BroadBand
>
>