Help understanding lame server error

Mark Andrews Mark_Andrews at isc.org
Thu Nov 20 13:50:51 UTC 2008


In message <8CACCF78-7617-4772-9ABF-DA29D692775E at newgeo.com>, Scott Haneda writ
es:
> On Nov 19, 2008, at 6:19 PM, Kevin Darcy wrote:
> 
> Here is another example, I think not a reverse lookup for sure:
> 20-Nov-2008 00:36:38.470 lame-servers: info: lame server resolving  
> 'szi.szi.sv.gov.yu' (in 'szi.sv.gov.yu'?): 195.178.32.2#53
> 
> Doesn't that mean that 195.178.32.2 requested a lookup from my NS for  
> szi.szi.sv.gov.yu?  I have an email server, and a bunch of web  
> servers, the web servers do not have DNS lookups on, so those are not  
> asking anything of my DNS server.  The only thing that should be, is  
> the email server, but that is not adding up, since I do not have  
> reverse lookup checking enabled.

	No.  195.178.32.2 is ns3.nic.yu which is lame (not serving)
	the zone it is listed as serving.

szi.sv.gov.yu.          86400   IN      NS      ns3.nic.yu.
szi.sv.gov.yu.          86400   IN      NS      odisej.telekom.yu.
szi.sv.gov.yu.          86400   IN      NS      ns.szi.sv.gov.yu.
szi.sv.gov.yu.          86400   IN      NS      ns1.nic.yu.
;; Received 185 bytes from 147.91.8.6#53(NS1.NIC.yu) in 147 ms

szi.sv.gov.yu.          74897   IN      NS      ns1.nic.yu.
szi.sv.gov.yu.          74897   IN      NS      ns3.nic.yu.
szi.sv.gov.yu.          74897   IN      NS      odisej.telekom.yu.
szi.sv.gov.yu.          74897   IN      NS      ns.szi.sv.gov.yu.
;; Received 185 bytes from 195.178.32.2#53(ns3.nic.yu) in 163 ms

> I can think of one thing, which is my web stats server, which I would  
> think, does resolve IP's to host names, in order to show a report of  
> what domains are going to websites.  That being said, I would think,  
> that I should see the source of the query IP in the lame server log  
> line.

	Why?  The log is there so you know which lookup (by name)
	is failing and which server is broken.
 
> Is there a way to log the client IP on that line?

	No.  At this depth named doesn't care which client asked.
	It's resolving the query for all clients that ask for that
	name and type.  When it has a answer it will send the
	response back.  All the resolver has is a function to send
	the callback data to.

	Mark
 
> Thanks
> --
> Scott
> 
> _______________________________________________
> bind-users mailing list
> bind-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: Mark_Andrews at isc.org



More information about the bind-users mailing list