<?xml version="1.0" encoding="utf-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
	<channel>
		<title><![CDATA[Linux Forum &mdash; CentOS + named: unexpected RCODE (REFUSED) и (SERVFAIL)]]></title>
		<link>https://linuxforum.ru/viewtopic.php?id=28131</link>
		<atom:link href="https://linuxforum.ru/extern.php?action=feed&amp;tid=28131&amp;type=rss" rel="self" type="application/rss+xml" />
		<description><![CDATA[Недавние сообщения в теме «CentOS + named: unexpected RCODE (REFUSED) и (SERVFAIL)».]]></description>
		<lastBuildDate>Mon, 06 May 2013 11:54:56 +0000</lastBuildDate>
		<generator>PunBB</generator>
		<item>
			<title><![CDATA[Re: CentOS + named: unexpected RCODE (REFUSED) и (SERVFAIL)]]></title>
			<link>https://linuxforum.ru/viewtopic.php?pid=344701#p344701</link>
			<description><![CDATA[<p>Вообще советуют вырубать логирование именно по этой теме (что я и сделал только что), это делается добавлением строчки в секцию logging {}, файла named.conf.<br /></p><div class="codebox"><pre><code>logging {
category lame-servers { null; };</code></pre></div><p>Вот что пишут HP:<br /><a href="http://h10025.www1.hp.com/ewfrf/wc/document?docname=c00855335&amp;cc=az&amp;dlc=en&amp;lc=ru">http://h10025.www1.hp.com/ewfrf/wc/docu … &amp;lc=ru</a><br /></p><div class="codebox"><pre><code>Comparing the source code of BIND 9.3.2 with BIND 9.2.0 reveals that these &#039;unexpected RCODE&#039; messages are logged under category lame-servers and that the logging in this category has been significantly enhanced so that when problems arise with resolution where the nameserver has to refer to another nameserver, more detailed information is now logged. NOTE, this is not necessarily forwarding - it can be regular recursive query handling where the nameserver goes to another to find the answer.
The reasoning behind this enhanced logging is that the DNS administrator can see more clearly from the log messages which nameservers have a problem and what that problem is, and can then inform the owners (by looking up the SOA of the domain using DIG) so that it can be fixed. As a result, BIND 9.3.2 has some new lameserver scenarios which are being reported which were not explicitly seen before.</code></pre></div>]]></description>
			<author><![CDATA[null@example.com (AlfaStriker)]]></author>
			<pubDate>Mon, 06 May 2013 11:54:56 +0000</pubDate>
			<guid>https://linuxforum.ru/viewtopic.php?pid=344701#p344701</guid>
		</item>
		<item>
			<title><![CDATA[Re: CentOS + named: unexpected RCODE (REFUSED) и (SERVFAIL)]]></title>
			<link>https://linuxforum.ru/viewtopic.php?pid=344700#p344700</link>
			<description><![CDATA[<p>3. Настроить ротацию логов, например, при помощи <a href="http://www.opennet.ru/base/sys/logrotate_howto.txt.html">logrotate</a>.</p>]]></description>
			<author><![CDATA[null@example.com (yars)]]></author>
			<pubDate>Mon, 06 May 2013 11:50:53 +0000</pubDate>
			<guid>https://linuxforum.ru/viewtopic.php?pid=344700#p344700</guid>
		</item>
		<item>
			<title><![CDATA[Re: CentOS + named: unexpected RCODE (REFUSED) и (SERVFAIL)]]></title>
			<link>https://linuxforum.ru/viewtopic.php?pid=344696#p344696</link>
			<description><![CDATA[<p>1. Выяснить причины ошибок<br />2. Настроить так, чтобы debug не попадал в логи</p><p>лучше первый вариант</p>]]></description>
			<author><![CDATA[null@example.com (alexfinn)]]></author>
			<pubDate>Mon, 06 May 2013 11:28:49 +0000</pubDate>
			<guid>https://linuxforum.ru/viewtopic.php?pid=344696#p344696</guid>
		</item>
		<item>
			<title><![CDATA[CentOS + named: unexpected RCODE (REFUSED) и (SERVFAIL)]]></title>
			<link>https://linuxforum.ru/viewtopic.php?pid=344694#p344694</link>
			<description><![CDATA[<p>Добрыня!</p><p>Имеется CentOS 6.4 x32, установлен пакет Bind. Настроен кэширующий DNS сервер.</p><p>Теперь о проблеме, в логах сыплются ошибки, лог файл /var/named/data/named.run<br />растет быстро вот с такими error&#039;ами:<br /></p><div class="quotebox"><blockquote><p>unexpected RCODE REFUSED</p></blockquote></div><div class="codebox"><pre><code>error (unexpected RCODE REFUSED) resolving &#039;229.243.72.202.in-addr.arpa/PTR/IN&#039;: 202.72.241.5#53
error (unexpected RCODE REFUSED) resolving &#039;229.243.72.202.in-addr.arpa/PTR/IN&#039;: 202.72.241.4#53
error (unexpected RCODE REFUSED) resolving &#039;203.55.68.118.in-addr.arpa/PTR/IN&#039;: 210.245.31.10#53
error (unexpected RCODE REFUSED) resolving &#039;229.243.72.202.in-addr.arpa/PTR/IN&#039;: 202.72.241.4#53
error (unexpected RCODE REFUSED) resolving &#039;229.243.72.202.in-addr.arpa/PTR/IN&#039;: 202.72.241.5#53</code></pre></div><div class="quotebox"><blockquote><p>unexpected RCODE SERVFAIL</p></blockquote></div><div class="codebox"><pre><code>error (unexpected RCODE SERVFAIL) resolving &#039;218.152.251.87.in-addr.arpa/PTR/IN&#039;: 81.91.177.130#53
error (unexpected RCODE SERVFAIL) resolving &#039;218.152.251.87.in-addr.arpa/PTR/IN&#039;: 81.91.176.2#53
error (unexpected RCODE SERVFAIL) resolving &#039;218.152.251.87.in-addr.arpa/PTR/IN&#039;: 81.91.176.2#53
error (unexpected RCODE SERVFAIL) resolving &#039;218.152.251.87.in-addr.arpa/PTR/IN&#039;: 81.91.177.130#53</code></pre></div><p>Конфиг /etc/named.conf:<br /></p><div class="codebox"><pre><code>//
// named.conf
//
// Provided by Red Hat bind package to configure the ISC BIND named(8) DNS
// server as a caching only nameserver (as a localhost DNS resolver only).
//
// See /usr/share/doc/bind*/sample/ for example named configuration files.
//

options {
    listen-on port 53 { localhost; 127.0.0.1; 192.168.1.2; };
    #listen-on-v6 port 53 { ::1; };
    listen-on-v6 port 53 { none; };
    forwarders {8.8.8.8;8.8.4.4;};
    directory     &quot;/var/named&quot;;
    dump-file     &quot;/var/named/data/cache_dump.db&quot;;
        statistics-file &quot;/var/named/data/named_stats.txt&quot;;
        memstatistics-file &quot;/var/named/data/named_mem_stats.txt&quot;;
    allow-query     { localhost; 127.0.0.1; 192.168.1.0/24;};
    allow-recursion {127.0.0.1;192.168.1.0/24;};

    dnssec-enable no;
    dnssec-validation no;
    dnssec-lookaside auto;

    /* Path to ISC DLV key */
    bindkeys-file &quot;/etc/named.iscdlv.key&quot;;

    managed-keys-directory &quot;/var/named/dynamic&quot;;
};

logging {
        channel default_debug {
                file &quot;data/named.run&quot;;
                severity dynamic;
        };
};

zone &quot;.&quot; IN {
    type hint;
    file &quot;named.ca&quot;;
};

include &quot;/etc/named.rfc1912.zones&quot;;
include &quot;/etc/named.root.key&quot;;</code></pre></div><p>Конфиг /etc/resolv.conf<br /></p><div class="codebox"><pre><code>nameserver 127.0.0.1</code></pre></div><p>Как правильно настроить чтобы логи не росли.</p><p>Спасибо<br />_<br />UP<br />Вообще советуют вырубать логирование именно по этой теме (что я и сделал только что), это делается добавлением строчки в секцию logging {}, файла named.conf.<br /></p><div class="codebox"><pre><code>logging {
category lame-servers { null; };</code></pre></div><p>Вот что пишут HP:</p><p>Comparing the source code of BIND 9.3.2 with BIND 9.2.0 reveals that these &#039;unexpected RCODE&#039; messages are logged under category lame-servers and that the logging in this category has been significantly enhanced so that when problems arise with resolution where the nameserver has to refer to another nameserver, more detailed information is now logged. NOTE, this is not necessarily forwarding - it can be regular recursive query handling where the nameserver goes to another to find the answer.<br />The reasoning behind this enhanced logging is that the DNS administrator can see more clearly from the log messages which nameservers have a problem and what that problem is, and can then inform the owners (by looking up the SOA of the domain using DIG) so that it can be fixed. As a result, BIND 9.3.2 has some new lameserver scenarios which are being reported which were not explicitly seen before.</p>]]></description>
			<author><![CDATA[null@example.com (AlfaStriker)]]></author>
			<pubDate>Mon, 06 May 2013 11:26:35 +0000</pubDate>
			<guid>https://linuxforum.ru/viewtopic.php?pid=344694#p344694</guid>
		</item>
	</channel>
</rss>
