Is per "view" logging possible with bind?
Gregory Hicks
ghicks at hicks-net.net
Mon Feb 2 23:13:54 UTC 2009
> Date: Mon, 02 Feb 2009 14:37:42 -0800
> From: JINMEI Tatuya / $B?@L at C#:H(B <Jinmei_Tatuya at isc.org>
>
> At Sat, 31 Jan 2009 08:31:35 -0500 (EST),
> Justin Piszcz <jpiszcz at lucidpixels.com> wrote:
> >
> > I have multiple views:
> >
> > internal
> > external
> > localhost
> >
> > Is it possible instead of seeing this in the logs:
>
> It's impossible if my understanding of the implementation is correct.
I may have mis-understood here, but I have TWO views and get logging by
view, thusly:
02-Feb-2009 07:04:42.544 queries: info: client 127.0.0.1#41764: view trusted: query: 137.139.188.205.in-addr.arpa IN PTR +
02-Feb-2009 07:04:42.547 queries: info: client 127.0.0.1#41765: view trusted: query: imo-d23.mx.aol.com IN A +
02-Feb-2009 07:05:18.297 queries: info: client 65.98.93.197#53: view external: query: metis.hicks-net.net IN MX -ED
02-Feb-2009 07:05:18.392 queries: info: client 65.98.93.197#53: view external: query: metis.hicks-net.net IN A -ED
02-Feb-2009 07:05:18.636 queries: info: client 127.0.0.1#41766: view trusted: query: 14.190.83.208.in-addr.arpa IN PTR +
02-Feb-2009 07:05:18.857 queries: info: client 127.0.0.1#41767: view trusted: query: discoursesfascinate.com IN A +
This is the way I have it set up... (Kinda simple):
logging {
channel example_log {
file "/var/log/named.log" versions 3 size 2m;
severity info;
print-severity yes;
print-time yes;
print-category yes;
};
channel "security" {
file "/var/log/named.sec" versions 3 size 2m ;
severity info;
print-severity yes ;
print-category yes ;
print-time yes ;
};
channel "queries" {
file "/var/log/named.queries" versions 3 size 2m ;
severity info ;
print-severity yes ;
print-category yes ;
print-time yes ;
};
category default {
example_log;
};
category security {
security;
default_syslog;
default_debug;
};
category queries {
queries;
default_syslog ;
default_debug;
};
};
view "trusted" {
match-clients { "internal"; };
recursion yes;
[...zones go here...]
};
view "external" {
match-clients { "any"; };
recursion no;
additional-from-cache no;
[...zones go here...]
};
If this is NOT what you're looking for, I apologize for wasting your time...
Regards,
Gregory Hicks
>
> ---
> JINMEI, Tatuya
> Internet Systems Consortium, Inc.
> _______________________________________________
> bind-users mailing list
> bind-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
---------------------------------------------------------------------
Gregory Hicks | Principal Systems Engineer
| Direct: 408.569.7928
People sleep peaceably in their beds at night only because rough men
stand ready to do violence on their behalf -- George Orwell
The price of freedom is eternal vigilance. -- Thomas Jefferson
"The best we can hope for concerning the people at large is that they
be properly armed." --Alexander Hamilton
More information about the bind-users
mailing list