Log exagerado do bind9

[flaviomreis]

Olá amigos,

Estou achando estranho a quantidade enorme de registro no syslog referentes ao bind9.

Alguém tem idéia do que isto se trata?

Aug 31 10:06:51 router named[9246]: too many timeouts resolving 'ns2.airi.co.kr/AAAA' (in 'airi.co.kr'?): disabling EDNS
Aug 31 10:06:51 router named[9246]: too many timeouts resolving 'ns.airi.co.kr/AAAA' (in 'airi.co.kr'?): disabling EDNS
Aug 31 10:06:51 router named[9246]: unexpected RCODE (SERVFAIL) resolving 'elenayjordan.com/MX/IN': 201.10.1.2#53
Aug 31 10:06:51 router named[9246]: unexpected RCODE (REFUSED) resolving 'elenayjordan.com/MX/IN': 66.196.84.168#53
Aug 31 10:06:52 router named[9246]: unexpected RCODE (REFUSED) resolving 'elenayjordan.com/MX/IN': 98.136.43.32#53
Aug 31 10:06:52 router named[9246]: too many timeouts resolving 'akademiq.net/MX' (in 'akademiq.net'?): disabling EDNS
Aug 31 10:06:52 router named[9246]: too many timeouts resolving 'ns2.airi.co.kr/AAAA' (in 'airi.co.kr'?): disabling EDNS
Aug 31 10:06:52 router named[9246]: too many timeouts resolving 'ns.airi.co.kr/AAAA' (in 'airi.co.kr'?): disabling EDNS
Aug 31 10:06:53 router named[9246]: too many timeouts resolving 'airi.co.kr/MX' (in 'airi.co.kr'?): disabling EDNS
Aug 31 10:06:53 router named[9246]: too many timeouts resolving 'akademiq.net/MX' (in 'akademiq.net'?): disabling EDNS
Aug 31 10:06:53 router named[9246]: too many timeouts resolving 'ns2.airi.co.kr/AAAA' (in 'airi.co.kr'?): disabling EDNS
Aug 31 10:06:53 router named[9246]: too many timeouts resolving 'ns.airi.co.kr/AAAA' (in 'airi.co.kr'?): disabling EDNS
Aug 31 10:06:53 router named[9246]: too many timeouts resolving 'akademiq.net/MX' (in 'akademiq.net'?): disabling EDNS
Aug 31 10:06:54 router named[9246]: too many timeouts resolving 'akademiq.net/MX' (in 'akademiq.net'?): disabling EDNS
Aug 31 10:06:54 router named[9246]: too many timeouts resolving 'ns1.webparti.com/AAAA' (in 'webparti.com'?): disabling EDNS
Aug 31 10:06:54 router named[9246]: too many timeouts resolving 'ns2.webparti.com/AAAA' (in 'webparti.com'?): disabling EDNS
Aug 31 10:06:55 router named[9246]: too many timeouts resolving 'ns2.airi.co.kr/AAAA' (in 'airi.co.kr'?): disabling EDNS
Aug 31 10:06:55 router named[9246]: too many timeouts resolving 'ns.airi.co.kr/AAAA' (in 'airi.co.kr'?): disabling EDNS
Aug 31 10:06:55 router named[9246]: too many timeouts resolving 'airi.co.kr/MX' (in 'airi.co.kr'?): disabling EDNS
Aug 31 10:06:55 router named[9246]: too many timeouts resolving 'ns1.webparti.com/AAAA' (in 'webparti.com'?): disabling EDNS
Aug 31 10:06:55 router named[9246]: too many timeouts resolving 'ns2.webparti.com/AAAA' (in 'webparti.com'?): disabling EDNS
Aug 31 10:06:55 router named[9246]: too many timeouts resolving 'akademiq.net/MX' (in 'akademiq.net'?): disabling EDNS
Aug 31 10:06:56 router named[9246]: too many timeouts resolving 'ns2.airi.co.kr/AAAA' (in 'airi.co.kr'?): disabling EDNS
Aug 31 10:06:56 router named[9246]: too many timeouts resolving 'ns.airi.co.kr/AAAA' (in 'airi.co.kr'?): disabling EDNS
Aug 31 10:06:56 router named[9246]: too many timeouts resolving 'ns1.webparti.com/AAAA' (in 'webparti.com'?): disabling EDNS
Aug 31 10:06:56 router named[9246]: too many timeouts resolving 'ns2.webparti.com/AAAA' (in 'webparti.com'?): disabling EDNS
Aug 31 10:06:56 router named[9246]: too many timeouts resolving 'akademiq.net/MX' (in 'akademiq.net'?): disabling EDNS
Aug 31 10:06:58 router named[9246]: too many timeouts resolving 'ns.airi.co.kr/AAAA' (in 'airi.co.kr'?): disabling EDNS
Aug 31 10:06:58 router named[9246]: too many timeouts resolving 'ns1.webparti.com/AAAA' (in 'webparti.com'?): disabling EDNS
Aug 31 10:06:58 router named[9246]: too many timeouts resolving 'ns2.webparti.com/AAAA' (in 'webparti.com'?): disabling EDNS
Aug 31 10:06:58 router named[9246]: too many timeouts resolving 'akademiq.net/MX' (in 'akademiq.net'?): disabling EDNS
Aug 31 10:06:58 router named[9246]: too many timeouts resolving 'ns2.airi.co.kr/AAAA' (in 'airi.co.kr'?): disabling EDNS
Aug 31 10:06:59 router named[9246]: too many timeouts resolving 'airi.co.kr/MX' (in 'airi.co.kr'?): disabling EDNS
Aug 31 10:06:59 router named[9246]: too many timeouts resolving 'ns1.webparti.com/AAAA' (in 'webparti.com'?): disabling EDNS
Aug 31 10:06:59 router named[9246]: too many timeouts resolving 'ns2.webparti.com/AAAA' (in 'webparti.com'?): disabling EDNS
Aug 31 10:07:00 router named[9246]: too many timeouts resolving 'akademiq.net/MX' (in 'akademiq.net'?): disabling EDNS

Obrigado

[alexandrecorrea]

post tua conf do bind.. pq aqui nunca vi dessa msg

[flaviomreis]

# cat /etc/bind/named.conf.options
options {
        directory "/var/cache/bind";
        forwarders {
          201.10.1.2;
          208.67.220.222;
          201.10.120.3;
          208.67.220.220;
        };
 
        listen-on {127.0.0.1; 192.168.1.1; 192.168.11.1; 192.168.3.1;};
        allow-query {192.168.1.0/24; 192.168.11.0/24; 192.168.3.0/24;};
        allow-recursion {192.168.1.0/24; 192.168.11.0/24; 192.168.3.0/24;};
        allow-transfer {none; };
 
        auth-nxdomain no;    # conform to RFC1035
        listen-on-v6 { none; };
};

Esta é minha configuração para cache de dns somente.

Obrigado pela atenção Alexandre.