continous DNS query to ROOT DNS server

Christopher Cain chris at christophercain.ca
Tue Apr 26 17:19:17 UTC 2011


Babu - if that's the case, and if the DHCP servers are only configured to
use your BIND servers for DNS resolution, then perhaps its an issue with
Windows DHCP and not BIND (unless you have configured BIND to forward
un-auth RFC1918 to AS112 servers).

Chris.


> ---------- Forwarded message ----------
> From: babu dheen <babudheen at yahoo.co.in>
> To: bind-users at lists.isc.org, Chris Buxton <chris.p.buxton at gmail.com>
> Date: Tue, 26 Apr 2011 22:13:24 +0530 (IST)
> Subject: Re: continous DNS query to ROOT DNS server
> Dear Chris,
>
> Actually this query is being sent by my DHCP server running in windows
> operating system.
>
> I have configured forwarders in DHCP towards my gateway DNS servers(running
> in Redhat BIND).
>
>
>
> --- On *Tue, 26/4/11, Chris Buxton <chris.p.buxton at gmail.com>* wrote:
>
>
> From: Chris Buxton <chris.p.buxton at gmail.com>
> Subject: Re: continous DNS query to ROOT DNS server
> To: "babu dheen" <babudheen at yahoo.co.in>, bind-users at lists.isc.org
> Date: Tuesday, 26 April, 2011, 9:17 PM
>
> Create RFC 1918 reverse zones for whatever parts of this address space
> you're using.
>
> Newer versions of BIND will do this automatically for you -- the zones
> are created without content. What version of BIND are you using?
>
> Chris Buxton
> BlueCat Networks
>
>
> On 4/26/11, babu dheen <babudheen at yahoo.co.in<http://in.mc1373.mail.yahoo.com/mc/compose?to=babudheen@yahoo.co.in>>
> wrote:
> > Dear Chris,
> >
> > Thanks for your quick response. But my concern is; why this query is
> > actually started going to AS112 servers.
> >
> > Is it because my DHCP servers do not maintain PTR record zone for all
> > internal IP address?
> >
> > I need to have a solution to stop this query at host level instead of
> adding
> > entry in DNS server
> >
> >
> > Regards
> > papdheen M
> >
> > --- On Tue, 26/4/11, Chris Buxton <chris.p.buxton at gmail.com<http://in.mc1373.mail.yahoo.com/mc/compose?to=chris.p.buxton@gmail.com>>
> wrote:
> >
> >
> > From: Chris Buxton <chris.p.buxton at gmail.com<http://in.mc1373.mail.yahoo.com/mc/compose?to=chris.p.buxton@gmail.com>
> >
> > Subject: Re: continous DNS query to ROOT DNS server
> > To: "babu dheen" <babudheen at yahoo.co.in<http://in.mc1373.mail.yahoo.com/mc/compose?to=babudheen@yahoo.co.in>>,
> bind-users at lists.isc.org<http://in.mc1373.mail.yahoo.com/mc/compose?to=bind-users@lists.isc.org>,
> "Kevin
> > Darcy" <kcd at chrysler.com<http://in.mc1373.mail.yahoo.com/mc/compose?to=kcd@chrysler.com>
> >
> > Date: Tuesday, 26 April, 2011, 5:52 PM
> >
> >
> > They're not root servers.
> >
> > Add this to your named.conf, alongside your 'forwarders' statement:
> >
> > forward only;
> >
> > Chris Buxton
> > BlueCat Networks
> >
> >
> > On 4/26/11, babu dheen <babudheen at yahoo.co.in<http://in.mc1373.mail.yahoo.com/mc/compose?to=babudheen@yahoo.co.in>>
> wrote:
> >> Hi,
> >>
> >> I understand that my system contacts AS112 server but not sure why my
> >> system
> >> is contacting AS112 ROOT servers
> >>
> >> Can you tell me what i need to do at server level to stop this. I read
> the
> >> RFC but no where it clearly mentioned why this is happening.
> >>
> >> I have already configured forwarders in my system to send query to my
> >> gateway DNS server(running in BIND). then why my system is not using
> >> gateway
> >> DNS either for reverse DNS query mapping?
> >>
> >> Regards
> >> babu
> >>
> >> --- On Tue, 26/4/11, Kevin Darcy <kcd at chrysler.com<http://in.mc1373.mail.yahoo.com/mc/compose?to=kcd@chrysler.com>>
> wrote:
> >>
> >>
> >> From: Kevin Darcy <kcd at chrysler.com<http://in.mc1373.mail.yahoo.com/mc/compose?to=kcd@chrysler.com>
> >
> >> Subject: Re: continous DNS query to ROOT DNS server
> >> To: bind-users at lists.isc.org<http://in.mc1373.mail.yahoo.com/mc/compose?to=bind-users@lists.isc.org>
> >> Date: Tuesday, 26 April, 2011, 12:32 AM
> >>
> >>
> >> On 4/25/2011 2:33 PM, babu dheen wrote:
> >>
> >>
> >>
> >>
> >>
> >> Dears,
> >>
> >>  I have DHCP server running in Windows Operating System(Windows 2003), i
> >> have configured forwarder towards gateway DNS server(running in redhat).
> >>
> >>  When i check the firewall hits for DHCP server i can see, my DHCP
> server
> >> is
> >> sending too many DNS query towards ROOT DNS servers(192.175.48.1,
> >> 192.175.48.6, 192.175.48.42 and etc)
> >>
> >>  Please guide us to stop this query at server level.
> >>
> >> Regards
> >> BabuThis is not a DHCP list.
> >>
> >> This is not a Microsoft list.
> >>
> >> Those aren't root nameserver addresses, they are AS112 addresses, see
> >> http://public.as112.net/node/8
> >>
> >> Apparently you didn't define your own RFC 1918 zones.
> >>
> >>
> >>
> >>                                         - Kevin
> >>
> >>
> >> -----Inline Attachment Follows-----
> >>
> >>
> >> _______________________________________________
> >> bind-users mailing list
> >> bind-users at lists.isc.org<http://in.mc1373.mail.yahoo.com/mc/compose?to=bind-users@lists.isc.org>
> >> https://lists.isc.org/mailman/listinfo/bind-users
> >
> > --
> > Sent from my mobile device
> >
>
> --
> Sent from my mobile device
>
>
> _______________________________________________
> bind-users mailing list
> bind-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20110426/41fb5afa/attachment.html>


More information about the bind-users mailing list