queries for external hostnames inside my domain?
Stuart.Browne at team.neustar
Mon Sep 7 23:58:01 UTC 2020
You might want to look at the requestor machine's "search" domains.
If the stub resolver starts appending search domains when it doesn't get a response it can use.
On 8/9/20, 09:51, "bind-users on behalf of L. A. Walsh" <bind-users-bounces at lists.isc.org on behalf of bind at tlinx.org> wrote:
Notice: This email is from an external sender.
On 9/7/2020 4:03 PM, Greg Rivers wrote:
> On Monday, 7 September 2020 17:46:47 CDT L. A. Walsh wrote:
>> First I'll see some server name:
>> 05-Sep-2020 15:30:23.374 queries: info: client @0x7fbcb804e720
>> 127.0.0.1#36542 (PeerSrv.org): view internal: query: PeerSrv.org IN AAAA
>> + (127.0.0.1)
>> followed by a 2nd one:
>> 05-Sep-2020 15:30:24.316 queries: info: client @0x7fbce40d5100
>> 127.0.0.1#36542 (PeerSrv.org.internal.Tlinx.org): view internal:
>> query:PeerSrv.org.internal.Tlinx.org IN AAAA + (127.0.0.1)
>> Where internal is a subdomain within tlinx.org.
>> wondering why I
>> see a 2nd lookup with the query looking for the domain inside my internal
>> Anyone seen this behavior before?
>> It probably doesn't add up to even 1% of my lookups, but I am
> Those are not "IPv6 queries", they are queries over IPv4 for AAAA records, -
Good point -- even as I asked that I had something like that scratching
on the inside of my head that I didn't quite remember or get. That
I know the other comes from inside my dom as well, but why the
ipv6 queries generate both an absolute query (from dns-root), and a
relative query inside my domain? When I look at it, I can tell
it looks odd and something seems to be looking up external domains from
the internal interface, but what might be causing it to also look for
it in the internal domain? A program bug?
Please visit https://urldefense.com/v3/__https://lists.isc.org/mailman/listinfo/bind-users__;!!N14HnBHF!vysYKWt_ec-btTnWt9H139TT3Kad4eUDbDHXLUG5DomMtkcukRYVVT6ckw8DzCt-sNgqYVQ$ to unsubscribe from this list
ISC funds the development of this software with paid support subscriptions. Contact us at https://urldefense.com/v3/__https://www.isc.org/contact/__;!!N14HnBHF!vysYKWt_ec-btTnWt9H139TT3Kad4eUDbDHXLUG5DomMtkcukRYVVT6ckw8DzCt-nD1Yklc$ for more information.
bind-users mailing list
bind-users at lists.isc.org
More information about the bind-users