Indeed I have setup querylog, and I have these show in my logs:<br>Apr 15 14:20:00 TOR-HYPER-01 named[10228]: client 172.18.4.214#47149: query: <a href="http://google.ca">google.ca</a> IN A +<br>Apr 15 14:20:09 TOR-HYPER-01 named[10228]: client 172.18.4.214#51366: query: <a href="http://yahoo.ca">yahoo.ca</a> IN A +<br>
Apr 15 14:23:32 TOR-HYPER-01 named[10228]: client 127.0.0.1#48177: query: <a href="http://google.ca">google.ca</a> IN A +<br><br>But I am still unable to determine if those reqs are asking the forwarders. The forwarders are all Windows boxes which I dont have rights to access. Still hoping there is something within bind9 that can say the req went to fwd'er.<br>
<br><div class="gmail_quote">On Thu, Apr 15, 2010 at 12:31 PM, Jonathan Reed <span dir="ltr"><<a href="mailto:jreed777@gmail.com">jreed777@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
Hey all,<br><br>I've setup bind9 to be a forwarder only. However I'm not understanding how to confirm requests for queries are being sent through to the forwarded dns servers. Even running in debug mode, I can see the req, but I dont see anything in the debug msg that says its been forwarded on to any of my forwarders. <br>
<br><br>named.conf.options:<br><br>options {<br> directory "/var/cache/bind";<br><br> forward only;<br> forwarders {<br> 172.20.4.1;<br> 172.20.4.3;<br> 172.20.4.10;<br>};<br>
allow-query {<br> 127.0.0.1;<br> <a href="http://172.0.0.0/8" target="_blank">172.0.0.0/8</a>;<br>};<br>};<br><br>Im run the server in debug and make a request for <a href="http://google.ca" target="_blank">google.ca</a> from the client. But this doesnt tell me that the request was actually sent to my forwarding servers. I want to be able to confirn this and know that my localhost isnt answering these queries for the client. Perhaps theres a logging config that will show me this? Any ideas?<br>
<br>$ sudo named -d9 -g -c /etc/bind/named.conf<br>15-Apr-2010 12:21:32.682 client 172.18.4.214#43801: UDP request<br>15-Apr-2010 12:21:32.682 client 172.18.4.214#43801: using view '_default'<br>15-Apr-2010 12:21:32.682 client 172.18.4.214#43801: request is not signed<br>
15-Apr-2010 12:21:32.682 client 172.18.4.214#43801: recursion available<br>15-Apr-2010 12:21:32.682 client 172.18.4.214#43801: query<br>15-Apr-2010 12:21:32.682 client 172.18.4.214#43801: query (cache) '<a href="http://google.ca/A/IN" target="_blank">google.ca/A/IN</a>' approved<br>
15-Apr-2010 12:21:32.682 client 172.18.4.214#43801: replace<br>15-Apr-2010 12:21:32.682 clientmgr @0x7f803f2d0760: createclients<br>15-Apr-2010 12:21:32.682 clientmgr @0x7f803f2d0760: create new<br>15-Apr-2010 12:21:32.683 client @0x7f80412ae2a0: create<br>
15-Apr-2010 12:21:32.683 createfetch: <a href="http://google.ca" target="_blank">google.ca</a> A<br>15-Apr-2010 12:21:32.683 client @0x7f80412ae2a0: udprecv<br>15-Apr-2010 12:21:32.684 fctx 0x7f8038643010(<a href="http://google.ca/A%27" target="_blank">google.ca/A'</a>): create<br>
15-Apr-2010 12:21:32.684 fctx 0x7f8038643010(<a href="http://google.ca/A%27" target="_blank">google.ca/A'</a>): join<br>15-Apr-2010 12:21:32.684 fetch 0x7f803f2c5140 (fctx 0x7f8038643010(<a href="http://google.ca/A%29" target="_blank">google.ca/A)</a>): created<br>
15-Apr-2010 12:21:32.684 fctx 0x7f8038643010(<a href="http://google.ca/A%27" target="_blank">google.ca/A'</a>): start<br>15-Apr-2010 12:21:32.684 fctx 0x7f8038643010(<a href="http://google.ca/A%27" target="_blank">google.ca/A'</a>): try<br>
15-Apr-2010 12:21:32.684 fctx 0x7f8038643010(<a href="http://google.ca/A%27" target="_blank">google.ca/A'</a>): cancelqueries<br>
15-Apr-2010 12:21:32.684 fctx 0x7f8038643010(<a href="http://google.ca/A%27" target="_blank">google.ca/A'</a>): getaddresses<br>15-Apr-2010 12:21:32.684 fctx 0x7f8038643010(<a href="http://google.ca/A%27" target="_blank">google.ca/A'</a>): query<br>
15-Apr-2010 12:21:32.684 resquery 0x7f8038649010 (fctx 0x7f8038643010(<a href="http://google.ca/A%29" target="_blank">google.ca/A)</a>): send<br>15-Apr-2010 12:21:32.684 resquery 0x7f8038649010 (fctx 0x7f8038643010(<a href="http://google.ca/A%29" target="_blank">google.ca/A)</a>): sent<br>
15-Apr-2010 12:21:32.684 resquery 0x7f8038649010 (fctx 0x7f8038643010(<a href="http://google.ca/A%29" target="_blank">google.ca/A)</a>): udpconnected<br>15-Apr-2010 12:21:32.684 resquery 0x7f8038649010 (fctx 0x7f8038643010(<a href="http://google.ca/A%29" target="_blank">google.ca/A)</a>): senddone<br>
15-Apr-2010 12:21:32.715 resquery 0x7f8038649010 (fctx 0x7f8038643010(<a href="http://google.ca/A%29" target="_blank">google.ca/A)</a>): response<br>15-Apr-2010 12:21:32.715 fctx 0x7f8038643010(<a href="http://google.ca/A%27" target="_blank">google.ca/A'</a>): answer_response<br>
15-Apr-2010 12:21:32.715 fctx 0x7f8038643010(<a href="http://google.ca/A%27" target="_blank">google.ca/A'</a>): cache_message<br>15-Apr-2010 12:21:32.715 fctx 0x7f8038643010(<a href="http://google.ca/A%27" target="_blank">google.ca/A'</a>): clone_results<br>
15-Apr-2010 12:21:32.716 fctx 0x7f8038643010(<a href="http://google.ca/A%27" target="_blank">google.ca/A'</a>): cancelquery<br>15-Apr-2010 12:21:32.716 fctx 0x7f8038643010(<a href="http://google.ca/A%27" target="_blank">google.ca/A'</a>): done<br>
15-Apr-2010 12:21:32.716 fctx 0x7f8038643010(<a href="http://google.ca/A%27" target="_blank">google.ca/A'</a>): stopeverything<br>15-Apr-2010 12:21:32.716 fctx 0x7f8038643010(<a href="http://google.ca/A%27" target="_blank">google.ca/A'</a>): cancelqueries<br>
15-Apr-2010 12:21:32.716 fctx 0x7f8038643010(<a href="http://google.ca/A%27" target="_blank">google.ca/A'</a>): sendevents<br>15-Apr-2010 12:21:32.716 client 172.18.4.214#43801: send<br>15-Apr-2010 12:21:32.716 client 172.18.4.214#43801: sendto<br>
15-Apr-2010 12:21:32.716 client 172.18.4.214#43801: senddone<br>15-Apr-2010 12:21:32.716 client 172.18.4.214#43801: next<br>15-Apr-2010 12:21:32.716 client 172.18.4.214#43801: endrequest<br>15-Apr-2010 12:21:32.716 fetch 0x7f803f2c5140 (fctx 0x7f8038643010(<a href="http://google.ca/A%29" target="_blank">google.ca/A)</a>): destroyfetch<br>
15-Apr-2010 12:21:32.716 fctx 0x7f8038643010(<a href="http://google.ca/A%27" target="_blank">google.ca/A'</a>): shutdown<br>15-Apr-2010 12:21:32.716 fctx 0x7f8038643010(<a href="http://google.ca/A%27" target="_blank">google.ca/A'</a>): doshutdown<br>
15-Apr-2010 12:21:32.716 fctx 0x7f8038643010(<a href="http://google.ca/A%27" target="_blank">google.ca/A'</a>): stopeverything<br>15-Apr-2010 12:21:32.716 fctx 0x7f8038643010(<a href="http://google.ca/A%27" target="_blank">google.ca/A'</a>): cancelqueries<br>
15-Apr-2010 12:21:32.716 fctx 0x7f8038643010(<a href="http://google.ca/A%27" target="_blank">google.ca/A'</a>): destroy<br><br>
</blockquote></div><br>