[svlug] BIND question
Mark Symonds
mark at symonds.net
Wed Mar 28 23:23:01 PST 2001
I've got to be missing something glaringly obvious but
am at a loss here.
AFAICT named is continuously trying to query a domain
and I don't know why. This has been going on for at
least two days now. Here is what tcpdump says:
22:48:51.005761 symonds.net.3900 > 194.19.34.251.domain: 5874 A? likt.net. (26)
22:48:51.006105 symonds.net.3900 > 194.19.34.251.domain: 55746 (51)
22:48:54.006122 symonds.net.3900 > 194.19.34.251.domain: 38853 (51)
22:49:01.023334 symonds.net.3900 > 194.19.34.251.domain: 64752 A? likt.net. (26)
22:49:01.023605 symonds.net.3900 > 194.19.34.251.domain: 24910 (51)
Every few seconds, over and over. It is also trying
194.19.34.250. Whois shows those IP's as being primary
and secondary for likt.net. Here is what I've tried:
* grepping all of the zonefiles and configs etc.,
nothing there
* Restarted named with a "clean" named.conf (none of my
additional zones in there) ... same thing
* named.root file bad or something? Tried ftping a new
one, it is the same
* Reinstalled named binaries
Finally, I tried turning on debug mode per the instructions
in the manpage and the O'Reilly book. It logs the startup
stuff but stops after that (compile option for the package?).
Could simply firewall it but rather need to know what
in the HECK is going on here!
Debian 2.2r2 box, updated as of a few mins ago.
Any and all appreciated,
--
perpetual-newbie Mark
More information about the svlug
mailing list