Question about URL being logged by resolver
Ondřej Surý
ondrej at isc.org
Sat Nov 4 07:09:10 UTC 2023
It means something in your network sent a query containing the literal URL below. The message is just misleading - the resolver tries to do QNAME minimization on it, it fails, switches to full name which ends with NXDOMAIN from root.
Ondrej
--
Ondřej Surý — ISC (He/Him)
My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours.
> On 3. 11. 2023, at 23:30, J Doe <general at nativemethods.com> wrote:
>
> Hello,
>
> On a Bind 9.18.19 server configured as a recursive resolver, I sometimes see URL's being noted in the log files.
>
> One such example is:
>
> 02-Nov-2023 23:32:19.435 lame-servers: info: success resolving 'https://app-measurement.com/sdk-exp/A' after disabling qname minimization due to 'ncache nxdomain'
>
> This seems unusual to me because Bind usually notes the domain name it is attempting to resolve, not an URL. In this particular case, I would expect to see a notation about "app-measurement.com" and not "http://etc".
>
> What is the significance of logging the URL and why does this happen in only some cases ?
>
> Thanks,
>
> - J
> --
> Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list
>
> ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information.
>
>
> bind-users mailing list
> bind-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
More information about the bind-users
mailing list