How to prevent BIND from resolving addresses in logs
Spumonti Spumonti
spumonti at yahoo.com
Thu Sep 27 22:44:22 UTC 2012
Wow, do I feel like an idiot ... there's dumb and then there's the message I sent in. I just took a quick look and *ASSUMED* the name in parentheses after the client IP address was the hostname of the IP address. Nope.
Looking at another line from the log and actually READING it I see this is not the case:
27-Sep-2012 17:17:00.236 client 192.168.5.69#5965 (mail.schnauzerproblems.com): query: mail.schnauzerproblems.com IN A +
I am ashamed.
--- On Thu, 9/27/12, Jeremy C. Reed <jreed at isc.org> wrote:
> From: Jeremy C. Reed <jreed at isc.org>
> Subject: Re: How to prevent BIND from resolving addresses in logs
> To: "Spumonti Spumonti" <spumonti at yahoo.com>
> Cc: bind-users at lists.isc.org
> Date: Thursday, September 27, 2012, 5:11 PM
> On Thu, 27 Sep 2012, Spumonti
> Spumonti wrote:
>
> > I just installed BIND 9.9.1-P3 from source and while
> looking through
> > the query log files I noticed that IP addresses were
> being resolved:
> >
> >
> > 27-Sep-2012 12:01:56.512 client 192.168.5.10#44863
> (host.foo.com):
> > query: www.ibm.com ...
>
>
> That is:
>
> 2570. [func]
> Log the destination address the query
> was sent to.
>
> [RT #19209]
>
> > In my other servers which are running the redhat
> packaged version of
> > BIND (9.8.2), my query logs look like:
> >
> > 27-Sep-2012 14:04:03.523 client 192.168.5.30#64638:
> query: www.amazon.com ...
>
> > I'm sure there's something completely obvious that I've
> missed. How
> > do I stop BIND from resolving these addresses and just
> including the
> > IP address in the log file?
>
> That feature isn't offered. Is it inconvenient to know where
> the query
> was sent to?
>
More information about the bind-users
mailing list