8.2.3 server flooding root servers
Stephane ANGLARET
sanglaret at yahoo.com
Mon Nov 12 18:28:20 UTC 2001
I have a DNS server with a problem. It is running Bind
8.2.3. I am running in a chrooted environment. The
server is configured to prohibit recursive requests.
It constantly queries the root servers with questions
about the root servers. Here is an example network
capture:
dns1 -> 202.12.27.33 DNS C M.ROOT-SERVERS.NET.
Internet Addr ?
dns1 -> 202.12.27.33 DNS C L.ROOT-SERVERS.NET.
Internet Addr ?
dns1 -> 202.12.27.33 DNS C K.ROOT-SERVERS.NET.
Internet Addr ?
dns1 -> 202.12.27.33 DNS C J.ROOT-SERVERS.NET.
Internet Addr ?
dns1 -> 202.12.27.33 DNS C I.ROOT-SERVERS.NET.
Internet Addr ?
dns1 -> 202.12.27.33 DNS C H.ROOT-SERVERS.NET.
Internet Addr ?
dns1 -> 202.12.27.33 DNS C G.ROOT-SERVERS.NET.
Internet Addr ?
dns1 -> 202.12.27.33 DNS C F.ROOT-SERVERS.NET.
Internet Addr ?
dns1 -> 202.12.27.33 DNS C E.ROOT-SERVERS.NET.
Internet Addr ?
dns1 -> 202.12.27.33 DNS C D.ROOT-SERVERS.NET.
Internet Addr ?
dns1 -> 202.12.27.33 DNS C C.ROOT-SERVERS.NET.
Internet Addr ?
dns1 -> 202.12.27.33 DNS C B.ROOT-SERVERS.NET.
Internet Addr ?
dns1 -> 202.12.27.33 DNS C A.ROOT-SERVERS.NET.
Internet Addr ?
My secondary DNS is running almost the same
configuration, but it has no problems.
Here is the named.conf for the primary. I have made a
few changes to avoid telling you more about myself
than you really need to know.:
logging {
channel default_log_file {
file "/var/log/default_named.log" versions
99 size unlimited;
severity debug 1;
print-category yes;
print-severity yes;
print-time yes;
};
category default { default_log_file; };
};
options {
directory "/var/named";
allow-transfer {
1.1.1.1 /* ISP DNS */
1.1.1.2 /* ISP Backup DNS *?
};
recursion no;
version "0000";
notify yes;
also-notify { 1.1.1.2;};
pid-file "/var/run/named.pid";
};
zone "." {
type hint;
file "root.cache";
};
zone "0.0.127.IN-ADDR.ARPA" {
type master;
file "db.localhost";
};
zone "example.com" {
type master;
file "db.example.com";
};
(More zones follow, but no more configuration options)
If you have ever seen a similar problem, or have any
idea what is going on please let me know.
___________________________________________________________
Do You Yahoo!? -- Une adresse @yahoo.fr gratuite et en français !
Yahoo! Courrier : http://courrier.yahoo.fr
More information about the bind-users
mailing list