search for: _audit_requetes_dns_et_logs_bind9

Hello,     Is it possible to filter DNS queries for specific TLD's using the internal logging system? My IPS/IDS alerts me when a suspicious TLD is being queried. However I'm only able to see the DC as the source.  Thanks. Ubuntu 14.04 Samba 4.7.3. -- -- James

...S engine. > > And third it is then just a matter of configuring Bind properly, you > can check our wiki at the following address (yeah, it's in French, but > it shouldn't be too much of a hassle for your favorite translation tool): > > https://dev.tranquil.it/wiki/SAMBA_-_Audit_requetes_DNS_et_logs_Bind9 > > Actually we had exactly the same question from a client a few month > ago... > > Cheers, and happy new year 2018! > > Denis > >> > > Denis,     I've attempted to setup the logging per your link. I ran into a couple issues. * Using your template for...

...better than the internal DNS engine. And third it is then just a matter of configuring Bind properly, you can check our wiki at the following address (yeah, it's in French, but it shouldn't be too much of a hassle for your favorite translation tool): https://dev.tranquil.it/wiki/SAMBA_-_Audit_requetes_DNS_et_logs_Bind9 Actually we had exactly the same question from a client a few month ago... Cheers, and happy new year 2018! Denis > -- Denis Cardon Tranquil IT Systems Les Espaces Jules Verne, bâtiment A 12 avenue Jules Verne 44230 Saint Sébastien sur Loire tel : +33 (0) 2.40.97.57.55 http://www.tranquil...

...guring Bind > properly, you > >> can check our wiki at the following address (yeah, it's in French, > >> but it shouldn't be too much of a hassle for your favorite > >> translation tool): > >> > >> > https://dev.tranquil.it/wiki/SAMBA_-_Audit_requetes_DNS_et_logs_Bind9 > >> > >> Actually we had exactly the same question from a client a > few month > >> ago... > >> > >> Cheers, and happy new year 2018! > >> > >> Denis > >> > >>> > >> > >> > > Denis, &gt...

...t; properly, you >>>> can check our wiki at the following address (yeah, it's in French, >>>> but it shouldn't be too much of a hassle for your favorite >>>> translation tool): >>>> >>>> >> https://dev.tranquil.it/wiki/SAMBA_-_Audit_requetes_DNS_et_logs_Bind9 >>>> Actually we had exactly the same question from a client a >> few month >>>> ago... >>>> >>>> Cheers, and happy new year 2018! >>>> >>>> Denis >>>> >>>> >>> Denis, >>> >&gt...