На сервере fedora 12 поднят dns+dhcpd. Но с недавних пор в логах появилась такая запись:
Sep 23 15:05:35 compgd named[15945]: client 192.168.0.111#1629: update 'ngdbnet.local/IN' denied
Sep 23 15:06:17 compgd named[15945]: client 192.168.0.133#65066: update 'ngdbnet.local/IN' denied
Sep 23 15:09:18 compgd dhcpd: DHCPINFORM from 192.168.0.133 via eth0: not authoritative for subnet 192.168.0.0
Sep 23 15:09:21 compgd dhcpd: DHCPINFORM from 192.168.0.133 via eth0: not authoritative for subnet 192.168.0.0
Sep 23 15:09:52 compgd named[15945]: client 192.168.0.117#55186: update 'ngdbnet.local/IN' denied
Sep 23 15:18:13 compgd named[15945]: client 192.168.0.130#1206: update 'ngdbnet.local/IN' denied
Sep 23 15:20:01 compgd dhcpd: DHCPDISCOVER from 00:81:87:9c:03:82 (303kab) via eth0
Sep 23 15:20:02 compgd dhcpd: DHCPOFFER on 192.168.0.137 to 00:81:87:9c:03:82 (303kab) via eth0
Sep 23 15:20:06 compgd dhcpd: DHCPDISCOVER from 00:81:87:9c:03:82 (303kab) via eth0
Sep 23 15:20:06 compgd dhcpd: DHCPOFFER on 192.168.0.137 to 00:81:87:9c:03:82 (303kab) via eth0
Sep 23 15:20:06 compgd dhcpd: Wrote 48 leases to leases file.
сами конфиги выглядит так:
dhcpd.conf
ddns-update-style interim;
log-facility local7;
use-host-decl-names true;
ignore client-updates;
option domain-name "ngdbnet.local";
option domain-name-servers 192.168.0.99;
option subnet-mask 255.255.255.0;
key DHCP_UPDATER {
algorithm HMAC-MD5;
secret key;
};
zone NGDBNET.LOCAL. {
primary 127.0.0.1;
key DHCP_UPDATER;
}
zone 0.168.192.IN-ADDR.ARPA. {
primary 127.0.0.1;
key DHCP_UPDATER;
}
subnet 192.168.0.0 netmask 255.255.255.0 {
range 192.168.0.102 192.168.0.150;
option routers 192.168.0.99;
}
named.conf
options {
listen-on port 53 { ngdbnet; 127.0.0.1; };
directory "/var/named";
dump-file "/var/named/data/cache_dump.db";
statistics-file "/var/named/data/named_stats.txt";
memstatistics-file "/var/named/data/named_mem_stats.txt";
allow-query {ngdbnet; 127.0.0.1; };
allow-transfer {192.168.0.96;};
#check-names master ignore;
forward first;
forwarders {172.16.0.14; 172.16.0.186; };
dnssec-enable yes;
dnssec-validation yes;
dnssec-lookaside . trust-anchor dlv.isc.org.;
};
key DHCP_UPDATER {
algorithm HMAC-MD5;
secret key;
};
logging {
channel default_debug {
file "data/named-update.log";
severity debug 3;
print-category yes;
print-severity yes;
print-time yes;
};
channel default_debug {
file "data/auth.log";
severity info;
print-category yes;
print-severity yes;
print-time yes;
};zone "ngdbnet.local" {
type master;
file "master/ngdb";
allow-update {key DHCP_UPDATER; };
};
zone "0.168.192.in-addr.arpa" {
type master;
file "192.168.0";
allow-update {key DHCP_UPDATER; };
};
zone "." {
type hint;
file "named.ca";
};
include "/etc/named.rfc1912.zones";
include "/etc/named.iscdlv.key";
category update { default_debug; };
category security { default_debug; };
};
