On Wed, 10 Apr 2013, Yitzchak Gale wrote:

> Paul, could you please double-check that we do not
> have HostnameLookups turned on anywhere in the
> Apache configuration files?

There's definitely a steady stream of port-53 traffic from abbot to 
the server listed first in its /etc/resolv.conf file.

I ran "strace -ff" against the main apache2 instance and saw a steady 
stream of stat()s against /etc/hosts and /etc/resolve.conf, followed 
by connect()s to our local DNS servers.

So something is doing frequent DNS lookups, but I'm not sure what's 
doing it.

All references to "look" (case-insensitive) are in in comments except 
for "HostnameLookups Off" in the main apache2.conf file:

abbot:/etc/apache2# grep -ir look .
./sites-available/default-ssl:  # ... checks and other lookup ...
./mods-enabled/autoindex.conf:# ... the server will look for by ...
./mods-available/autoindex.conf:# ... the server will look for by ...
./apache2.conf:# AccessFileName: The name of the file to look ...
./apache2.conf:# HostnameLookups: Log the names ...
./apache2.conf:# ... result in AT LEAST one lookup request ...
./apache2.conf:HostnameLookups Off

The *logs* show no evidence of DNS lookups.

I'm going to start spelunking for .htaccess files that use hostnames 
in Allow or Deny directives. Or maybe it's a mod_python thing.

Stumped for now,

-- 
Paul Heinlein                 Galois, Inc.
Systems Administrator         421 SW Sixth Avenue, Suite 300
[email protected]           Portland, Oregon 97204
+1 503 626-6616 x140          http://corp.galois.com/
_______________________________________________
haskell-infrastructure mailing list
[email protected]
http://community.galois.com/mailman/listinfo/haskell-infrastructure

Reply via email to