search for: querylog

I had configured Samba AD's with Bind9_DLZ in all DC. But for some reason (i couldn't determine) three (sambadc02,03,04) AD's responded very slowly . So change to Samba_Internal backend into the servers with problem and works fine. sambadc01 -> with FSMO roles - Bind9_DLZ sambadc02 -> Samba_Internal sambadc03 -> Samba_Internal sambadc04 -> Samba_Internal My question is:

...10.13.252.150; 10.13.252.152; }; recursion yes; allow-recursion { trusted; }; allow-query-cache { trusted; }; allow-transfer { trusted; }; }; logging { channel default_debug { file "data/named.run"; severity dynamic; }; //Enable Log channel querylog{ file "/var/log/named/querylog"; severity debug 10; print-category yes; print-time yes; print-severity yes; }; category queries { querylog;}; }; zone "." IN { type hint; file "named.ca"...

Looks like one of my name servers (CentOS 5) gets a lot of malicious queries. The cpu load is constantly about 3 %. I put on stricter limits on who is allowed recursive queries, but this does not affect the CPU load. I also updated bind. I temporarily turned on querylog (command: rndc querylog), and noticed that I get over 200 queries like this per second: > Aug 17 07:41:38 mx2 named[6873]: client 205.145.64.200#53: query (cache) 'ripe.net/ANY/IN' denied > Aug 17 07:41:38 mx2 named[6873]: client 204.10.45.5#53: query (cache) 'ripe.net/ANY/IN...

...ep of the dial plan, as though it didn't receive any commands from the program. We know it is running, and outputting its results, because we have called it from within a bash script, and in doing so, I set the script to output stdout to a txt file for testing (like this > /var/log/asterisk/querylog). When we do this, the file does end up with the first line showing STREAM FILE filename. We're at a bit of a loss as to what's going on. We have checked filenames and are pretty sure that there are no typos and that the files are there. Further, I have a perl agi script using asterisk::ag...

...ecursion { 192.168.0.0/24; 10.11.0.0/24; 127.0.0.1; }; forwarders { 192.168.0.253; 8.8.8.8; }; allow-transfer { none; }; dnssec-validation no; dnssec-enable no; listen-on port 53 { 127.0.0.1; 10.11.0.1; 192.168.0.1; }; listen-on-v6 { none; }; querylog yes; tkey-gssapi-keytab "/var/lib/samba/private/dns.keytab"; }; logging { channel xfer-log { file "/var/log/named.log"; print-category yes; print-severity yes; severity info; }; cat...

I've got a CentOS server that crashes due to a bad hard disk. I have got a spare disk and need to format and reinstall CentOS from the SERVER CD. Backup and reinstall is a major PITA because of some of the customisations that I've done e.g. the DNS Server is set to log queries (the default does not do this). Any tips on :- - backing up and reinstalling (is a script available)? - is the

On Thu, 4 Aug 2016 12:02:18 +0200 rme at bluemail.ch wrote: > > Well, I am using IPv6 mainly for all services and don't want to > > disable it. Though I might try this temporary which will be quite a > > bunch of reconfiguration to disable IPv6 in all services. So I will > > come back with results on this later. > > I have completely disabled IPv6 on the server

Perhaps I am on the wrong track but I would like to share some additional observations... I quickly enabled DNS query logging: # rndc querylog Then run another gpupdate on the client. During the Update I see lots of queries: 04-Aug-2016 14:46:58.414 queries: info: client 10.0.1.186#59270 (_ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.ad.cyberdyne.local): view internal: query: _ldap._tcp.Default-First-Site-Name._sites.dc._msdc...

This is with -d10, I test in Windows 10 (joining to domain) and same error, "Internal error". One thing, I don't execute the domain provision command because I put all the files created in the old server into the new server, that's metter??? INFO: Current debug levels: all: 10 tdb: 10 printdrivers: 10 lanman: 10 smb: 10 rpc_parse: 10 rpc_srv: 10 rpc_cli: 10