On Wed, 10 Apr 2013, Yitzchak Gale wrote: > Paul, could you please double-check that we do not > have HostnameLookups turned on anywhere in the > Apache configuration files?
There's definitely a steady stream of port-53 traffic from abbot to the server listed first in its /etc/resolv.conf file. I ran "strace -ff" against the main apache2 instance and saw a steady stream of stat()s against /etc/hosts and /etc/resolve.conf, followed by connect()s to our local DNS servers. So something is doing frequent DNS lookups, but I'm not sure what's doing it. All references to "look" (case-insensitive) are in in comments except for "HostnameLookups Off" in the main apache2.conf file: abbot:/etc/apache2# grep -ir look . ./sites-available/default-ssl: # ... checks and other lookup ... ./mods-enabled/autoindex.conf:# ... the server will look for by ... ./mods-available/autoindex.conf:# ... the server will look for by ... ./apache2.conf:# AccessFileName: The name of the file to look ... ./apache2.conf:# HostnameLookups: Log the names ... ./apache2.conf:# ... result in AT LEAST one lookup request ... ./apache2.conf:HostnameLookups Off The *logs* show no evidence of DNS lookups. I'm going to start spelunking for .htaccess files that use hostnames in Allow or Deny directives. Or maybe it's a mod_python thing. Stumped for now, -- Paul Heinlein Galois, Inc. Systems Administrator 421 SW Sixth Avenue, Suite 300 [email protected] Portland, Oregon 97204 +1 503 626-6616 x140 http://corp.galois.com/ _______________________________________________ haskell-infrastructure mailing list [email protected] http://community.galois.com/mailman/listinfo/haskell-infrastructure
