Dana Holland said:
> I'm at a complete loss here - why would I be getting this error message?
check the DNS logs on the box, tune the log configuration on BIND
if you need to, my log configuration for BIND 8 is below(seems similar
to what BIND 9 uses):
logging {
channel chroot_default {
file "log/named.log" versions 3 size 10m;
print-time yes;
print-category yes;
severity info;
};
channel chroot_debug {
file "log/debug.log" versions 3 size 10m;
print-time yes;
print-category yes;
severity dynamic;
};
channel syslog_server {
syslog daemon;
print-category yes;
severity info;
};
category default { syslog_server; };
category panic { syslog_server; };
category packet { chroot_debug; };
category lame-servers { null; };
category queries { null; };
category statistics { chroot_default; };
category config { syslog_server; };
category parser { syslog_server; };
category ncache { syslog_server; };
category xfer-in { syslog_server; };
category xfer-out { syslog_server; };
category db { syslog_server; };
category eventlib { chroot_default; };
category notify { syslog_server; };
category cname { syslog_server; };
category security { syslog_server; };
category os { syslog_server; };
category insist { syslog_server; };
category maintenance { syslog_server; };
category load { syslog_server; };
category response-checks { syslog_server; };
};
you'll probably want to log queries as well during the testing,
so I would change the null; in queries to syslog_server; . Note
I start my BIND with /usr/sbin/named -u named -g named -t /etc/bind
so the paths in the log files above are relative to /etc/bind, if
you don't chroot() your BIND you'll want to set absolute paths.
also be sure the zone that you are querinig exists on that nameserver
and/or that you allow recursive queries. also check to be sure
no firewall is preventing communication, something like nmap should
work: nmap -sU -p 53 IP_ADDRESS
nate
--
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list
