PDA

Archiv verlassen und diese Seite im Standarddesign anzeigen : Bind9.8 logging nicht mehr möglich?



timmbo
10.08.15, 08:00
Hallo,

ich habe in meinem Bind9.7 im name.conf File eine logging option definiert.
Wenn ich diese option nun im neuen File named.conf.option definiere, teilt mir syslog mit, dass er das attribut logging nicht kennt.
Wie kann ich aber bei eingeschaltetem querylog die querys sehen/finden?


Thx
Timm

muell200
10.08.15, 09:00
ich habe in meinem Bind9.7 im name.conf File eine logging option definiert.


zeig uns mal deine conifg - oder sollen wir raten?

timmbo
10.08.15, 09:12
Hallo,

hier ist sie, das logging habe ich derzeit auskommentiert:
Die IP-Adresse habe ich mit "IP-Adresse" ersetzt.
Die acl list habe ich auch weg lassen, denn die ist ja hie rnicht relevant.

options {
directory "/var/cache/bind";

// If there is a firewall between you and nameservers you want
// to talk to, you may need to fix the firewall to allow multiple
// ports to talk. See http://www.kb.cert.org/vuls/id/800113

// If your ISP provided one or more IP addresses for stable
// nameservers, you probably want to use them as forwarders.
// Uncomment the following block, and insert the addresses replacing
// the all-0's placeholder.

// forwarders {
// 0.0.0.0;
// };

//================================================== ======================
// If BIND logs error messages about the root key being expired,
// you will need to update your keys. See https://www.isc.org/bind-keys
//================================================== ======================
dnssec-validation auto;

auth-nxdomain no; # conform to RFC1035


#forwarders { 195.58.160.194; 195.58.161.122; };

# Enable the next entry to prefer usage of the name server declared in
# the forwarders section.

#forward first;

# The listen-on record contains a list of local network interfaces to
# listen on. Optionally the port can be specified. Default is to
# listen on all interfaces found on your system. The default port is
# 53.

listen-on port 53 { "IP-Adresse"; };

query-source address "IP-Adresse";
transfer-source "IP-Adresse";

# The listen-on-v6 record enables or disables listening on IPv6
# interfaces. Allowed values are 'any' and 'none' or a list of
# addresses.
listen-on-v6 { none; };

# The next three statements may be needed if a firewall stands between
# the local server and the internet.

#query-source address * port 53;
#transfer-source * port 53;
notify-source "IP-Adresse" port 53;

# The allow-query record contains a list of networks or IP addresses
# to accept and deny queries from. The default is to allow queries
# from all hosts.

allow-query { any; };
allow-transfer { "IP-Adresse"; };
allow-recursion { resolverlaubt; };


# If notify is set to yes (default), notify messages are sent to other
# name servers when the the zone data is changed. Instead of setting
# a global 'notify' statement in the 'options' section, a separate
# 'notify' can be added to each zone definition.

notify yes;

#logging {
# # Log queries to a file limited to a size of 100 MB.
# channel query_logging {
# file "/var/log/named_querylog"
# versions 3 size 60M;
# print-time yes; // timestamp log entries
# };
# category queries {
# query_logging;
# };
#
# # Or log this kind alternatively to syslog.
# channel syslog_queries {
# syslog user;
# severity info;
# };
# category queries { syslog_queries; };
#
# # Log general name server errors to syslog.
# channel syslog_errors {
# syslog user;
# severity error;
# };
# category default { syslog_errors; };
#
# # Don't log lame server messages.
# category lame-servers { null; };
#};


};


Grüße
Timm

timmbo
10.08.15, 10:03
Hi,

hab denFehler gefunden.
logging darf nicht unt er options sein, d.h. options muß erst mit }; beendet werden.


Grüße
Timm