update denied ?!

Bind, PowerDNS
Post Reply
kane
Posts: 82
Joined: 2002-10-04 01:22
 

update denied ?!

Post by kane »

Hi!
Bekomme seit gestern (01.08.) permanent diese Meldungen in /var/log/warn

Code: Select all

p151xxxxxxx:/ # tail /var/log/warn
Aug  2 00:17:30 p151xxxxxxx /usr/sbin/named[2812]: client 83.129.0.225#33104: update denied
Aug  2 00:22:33 p151xxxxxxx /usr/sbin/named[2812]: client 83.129.0.225#33103: update denied
Aug  2 00:22:45 p151xxxxxxx /usr/sbin/named[2812]: client 83.129.0.225#32855: update denied
Aug  2 00:23:02 p151xxxxxxx /usr/sbin/named[2812]: client 83.129.0.225#33009: update denied
Aug  2 00:23:21 p151xxxxxxx /usr/sbin/named[2812]: client 83.129.0.225#33045: update denied
Aug  2 00:23:32 p151xxxxxxx /usr/sbin/named[2812]: client 83.129.0.225#33212: update denied
Aug  2 00:24:02 p151xxxxxxx /usr/sbin/named[2812]: client 83.129.0.225#33230: update denied
Aug  2 00:24:35 p151xxxxxxx /usr/sbin/named[2812]: client 83.129.0.225#33238: update denied
Aug  2 00:45:40 p151xxxxxxx postfix/smtpd[9520]: warning: 66.126.254.87: hostname 66-126-254-87.ded.pacbell.net verification failed: Host not found
Aug  2 00:52:21 p151xxxxxxx /usr/sbin/named[2812]: client 83.129.0.225#32948: update denied
Kann mir aber beim besten Willen nicht erklären. An der Config des DNS habe ich nichts geändert. Trotzdem hier mal meine Config:

named.conf

Code: Select all

# ServerIP 217.160.134.81

options {

        # The directory statement defines the name server´s
        # working directory

        directory "/var/named";

        # The forwarders record contains a list of servers to
        # which queries should be forwarded. Enable this line and
        # modify the IP-address to your provider's name server.
        # Up to three servers may be listed.

        #forwarders { 10.11.12.13; 10.11.12.14; };

        # Enable the next entry to prefer usage of the name
        # server declared in the forwarders section.

        #forward first;

        # The listen-on record contains a list of local network
        # interfaces to listen on. Optionally the port can be
        # specified. Default is to listen on all interfaces found
        # on your system. The default port is 53.

        #listen-on port 53 { 127.0.0.1; };

        # The listen-on-v6 record enables or disables listening
        # on IPV6 interfaces. Allowed values are 'any' and 'none'
        # or a list of addresses. IPv6 can only be used with
        # kernel 2.4 in this release.

        #listen-on-v6 { any; };

        # The next three statements may be needed if a firewall
        # stands between the local server and the internet.

        #query-source address * port 53;
        #transfer-source * port 53;
        #notify-source * port 53;

        # The allow-query record contains a list of networks or
        # IP-addresses to accept and deny queries from. The
        # default is to allow queries from all hosts.

        #allow-query { 127.0.0.1; };

        # If notify is set to yes (default), notify messages are
        # sent to other name servers when the the zone data is
        # changed. Instead of setting a global 'notify' statement
        # in the 'options' section, a separate 'notify' can be
        # added to each zone definition.

        notify no;

        # erlaubt das zone-update zu ns.schlund.de und ns2.schlund.de
        allow-transfer { 195.20.224.97; 212.227.123.3; };

        auth-nxdomain no;
};

###### Pflichteinträge #######

zone "localhost" in {
type master;
file "localhost.zone";
};

zone "0.0.127.in-addr.arpa" in {
type master;
file "127.0.0.zone";
};

zone "134.160.217.in-addr.arpa" in {
        type master;
        file "217.160.134.zone";
};

zone "." in {
        type hint;
        file "root.hint";
};

##############################
### EIGENE DOMAINS ###########
#############################

# Für Zahlen am Anfang
include "/etc/named/0.conf"; 

# A-Z
include "/etc/named/a.conf"; 
include "/etc/named/b.conf"; 
include "/etc/named/c.conf"; 
include "/etc/named/d.conf";
include "/etc/named/e.conf";
include "/etc/named/f.conf";
include "/etc/named/g.conf";
include "/etc/named/h.conf";
include "/etc/named/i.conf";
include "/etc/named/j.conf";
include "/etc/named/k.conf";
include "/etc/named/l.conf";
include "/etc/named/m.conf";
include "/etc/named/n.conf";
include "/etc/named/o.conf";
include "/etc/named/p.conf";
include "/etc/named/q.conf";
include "/etc/named/r.conf";
include "/etc/named/s.conf";
include "/etc/named/t.conf";
include "/etc/named/u.conf";
include "/etc/named/v.conf";
include "/etc/named/w.conf";
include "/etc/named/x.conf";
include "/etc/named/y.conf";
include "/etc/named/z.conf";

root.hint

Code: Select all

; <<>> DiG 9.1.3 <<>> @ns.icann.org . ns
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 733
;; flags: qr rd; QUERY: 1, ANSWER: 13, AUTHORITY: 0, ADDITIONAL: 13

;; QUESTION SECTION:
;.                              IN      NS

;; ANSWER SECTION:
.                       195037  IN      NS      H.ROOT-SERVERS.NET.
.                       195037  IN      NS      C.ROOT-SERVERS.NET.
.                       195037  IN      NS      G.ROOT-SERVERS.NET.
.                       195037  IN      NS      F.ROOT-SERVERS.NET.
.                       195037  IN      NS      B.ROOT-SERVERS.NET.
.                       195037  IN      NS      J.ROOT-SERVERS.NET.
.                       195037  IN      NS      K.ROOT-SERVERS.NET.
.                       195037  IN      NS      L.ROOT-SERVERS.NET.
.                       195037  IN      NS      M.ROOT-SERVERS.NET.
.                       195037  IN      NS      I.ROOT-SERVERS.NET.
.                       195037  IN      NS      E.ROOT-SERVERS.NET.
.                       195037  IN      NS      D.ROOT-SERVERS.NET.
.                       195037  IN      NS      A.ROOT-SERVERS.NET.

;; ADDITIONAL SECTION:
H.ROOT-SERVERS.NET.     281437  IN      A       128.63.2.53
C.ROOT-SERVERS.NET.     281437  IN      A       192.33.4.12
G.ROOT-SERVERS.NET.     281437  IN      A       192.112.36.4
F.ROOT-SERVERS.NET.     281437  IN      A       192.5.5.241
B.ROOT-SERVERS.NET.     281437  IN      A       192.228.79.201
J.ROOT-SERVERS.NET.     281437  IN      A       192.58.128.30
K.ROOT-SERVERS.NET.     281437  IN      A       193.0.14.129
L.ROOT-SERVERS.NET.     281437  IN      A       198.32.64.12
M.ROOT-SERVERS.NET.     281437  IN      A       202.12.27.33
I.ROOT-SERVERS.NET.     281437  IN      A       192.36.148.17
E.ROOT-SERVERS.NET.     281437  IN      A       192.203.230.10
D.ROOT-SERVERS.NET.     281437  IN      A       128.8.10.90
A.ROOT-SERVERS.NET.     281437  IN      A       198.41.0.4

;; Query time: 200 msec
;; SERVER: 192.0.34.126#53(ns.icann.org)
;; WHEN: Sun Aug  1 00:45:02 2004
;; MSG SIZE  rcvd: 436

default.hosts

Code: Select all

$TTL 1W
@                               IN SOA  ns.pxnet.de.   root (
                                                2004071315
                                                8H
                                                2H
                                                1W
                                                11H )

@                               IN NS   ns.pxnet.de.
@                               IN NS   ns.schlund.de.

@                               IN A    217.160.134.81
*                               IN A    217.160.134.81

@                               IN MX   80 mx
*                               IN MX   80 mx
Benötigte Leerzeilen in den Configs existieren und der DNS läuft schon Monate ohne Probs. Ich weiß nur nicht wie ich diese Meldungen deuten soll.

Danke schon einmal vorab für eure Antworten!

Gruß Kane
deleuze
Posts: 6
Joined: 2004-07-21 14:49
 

Re: update denied ?!

Post by deleuze »

versuch mal noch allow-update
chris76
Posts: 1878
Joined: 2003-06-27 14:37
Location: Germering
 

Re: update denied ?!

Post by chris76 »

ist der Server

Code: Select all

83.129.0.225
Ã?berhaupt einer dem du ein Update gestatten willst?

Kann ich mir nämlich nicht vorstellen

Code: Select all

automatix:~# host 83.129.0.225
225.0.129.83.in-addr.arpa domain name pointer p83.129.0.225.tisdip.tiscali.de.
Gruß Christian

BofH excuses: YOU HAVE AN I/O ERROR -> Incompetent Operator error
Post Reply