Bind 9.2.4 and logging

Henning Markussen hm at mib.dk
Mon Mar 3 21:58:34 UTC 2008


Hi

I'm trying to close down some DNS servers that currently are open to 
recursive requests.
They are ruining bind 9.2.4

In this process my plan was to determine what clients are using the 
servers as recursive name servers.

I've found the category resolver, client and queries

queries logs the queries ok - but nothing gets into the resolver or 
client category

channel queries_log {
file "/var/log/queries.log" versions 5 size 5m;
print-time yes;
severity dynamic;
};

channel resolver_log {
file "/var/log/resolver.log" versions 5 size 5m;
print-time yes;
severity dynamic;
};

channel client_log {
file "/var/log/client.log" versions 5 size 5m;
print-time yes;
severity dynamic;
};

category client { client_log; };
category queries { queries_log; };
category resolver { resolver_log; };

Is there a category where I can log if a request is to the authoritative 
or to the recursive, or am I just not using the categories correct?

Thank you for any input or ideas

- Henning


More information about the bind-users mailing list