update denied ?!
Posted: 2004-08-02 01:02
Hi!
Bekomme seit gestern (01.08.) permanent diese Meldungen in /var/log/warn
Kann mir aber beim besten Willen nicht erklären. An der Config des DNS habe ich nichts geändert. Trotzdem hier mal meine Config:
named.conf
root.hint
default.hosts
Benötigte Leerzeilen in den Configs existieren und der DNS läuft schon Monate ohne Probs. Ich weiß nur nicht wie ich diese Meldungen deuten soll.
Danke schon einmal vorab für eure Antworten!
Gruß Kane
Bekomme seit gestern (01.08.) permanent diese Meldungen in /var/log/warn
Code: Select all
p151xxxxxxx:/ # tail /var/log/warn
Aug 2 00:17:30 p151xxxxxxx /usr/sbin/named[2812]: client 83.129.0.225#33104: update denied
Aug 2 00:22:33 p151xxxxxxx /usr/sbin/named[2812]: client 83.129.0.225#33103: update denied
Aug 2 00:22:45 p151xxxxxxx /usr/sbin/named[2812]: client 83.129.0.225#32855: update denied
Aug 2 00:23:02 p151xxxxxxx /usr/sbin/named[2812]: client 83.129.0.225#33009: update denied
Aug 2 00:23:21 p151xxxxxxx /usr/sbin/named[2812]: client 83.129.0.225#33045: update denied
Aug 2 00:23:32 p151xxxxxxx /usr/sbin/named[2812]: client 83.129.0.225#33212: update denied
Aug 2 00:24:02 p151xxxxxxx /usr/sbin/named[2812]: client 83.129.0.225#33230: update denied
Aug 2 00:24:35 p151xxxxxxx /usr/sbin/named[2812]: client 83.129.0.225#33238: update denied
Aug 2 00:45:40 p151xxxxxxx postfix/smtpd[9520]: warning: 66.126.254.87: hostname 66-126-254-87.ded.pacbell.net verification failed: Host not found
Aug 2 00:52:21 p151xxxxxxx /usr/sbin/named[2812]: client 83.129.0.225#32948: update denied
named.conf
Code: Select all
# ServerIP 217.160.134.81
options {
# The directory statement defines the name server´s
# working directory
directory "/var/named";
# The forwarders record contains a list of servers to
# which queries should be forwarded. Enable this line and
# modify the IP-address to your provider's name server.
# Up to three servers may be listed.
#forwarders { 10.11.12.13; 10.11.12.14; };
# Enable the next entry to prefer usage of the name
# server declared in the forwarders section.
#forward first;
# The listen-on record contains a list of local network
# interfaces to listen on. Optionally the port can be
# specified. Default is to listen on all interfaces found
# on your system. The default port is 53.
#listen-on port 53 { 127.0.0.1; };
# The listen-on-v6 record enables or disables listening
# on IPV6 interfaces. Allowed values are 'any' and 'none'
# or a list of addresses. IPv6 can only be used with
# kernel 2.4 in this release.
#listen-on-v6 { any; };
# The next three statements may be needed if a firewall
# stands between the local server and the internet.
#query-source address * port 53;
#transfer-source * port 53;
#notify-source * port 53;
# The allow-query record contains a list of networks or
# IP-addresses to accept and deny queries from. The
# default is to allow queries from all hosts.
#allow-query { 127.0.0.1; };
# If notify is set to yes (default), notify messages are
# sent to other name servers when the the zone data is
# changed. Instead of setting a global 'notify' statement
# in the 'options' section, a separate 'notify' can be
# added to each zone definition.
notify no;
# erlaubt das zone-update zu ns.schlund.de und ns2.schlund.de
allow-transfer { 195.20.224.97; 212.227.123.3; };
auth-nxdomain no;
};
###### Pflichteinträge #######
zone "localhost" in {
type master;
file "localhost.zone";
};
zone "0.0.127.in-addr.arpa" in {
type master;
file "127.0.0.zone";
};
zone "134.160.217.in-addr.arpa" in {
type master;
file "217.160.134.zone";
};
zone "." in {
type hint;
file "root.hint";
};
##############################
### EIGENE DOMAINS ###########
#############################
# Für Zahlen am Anfang
include "/etc/named/0.conf";
# A-Z
include "/etc/named/a.conf";
include "/etc/named/b.conf";
include "/etc/named/c.conf";
include "/etc/named/d.conf";
include "/etc/named/e.conf";
include "/etc/named/f.conf";
include "/etc/named/g.conf";
include "/etc/named/h.conf";
include "/etc/named/i.conf";
include "/etc/named/j.conf";
include "/etc/named/k.conf";
include "/etc/named/l.conf";
include "/etc/named/m.conf";
include "/etc/named/n.conf";
include "/etc/named/o.conf";
include "/etc/named/p.conf";
include "/etc/named/q.conf";
include "/etc/named/r.conf";
include "/etc/named/s.conf";
include "/etc/named/t.conf";
include "/etc/named/u.conf";
include "/etc/named/v.conf";
include "/etc/named/w.conf";
include "/etc/named/x.conf";
include "/etc/named/y.conf";
include "/etc/named/z.conf";
root.hint
Code: Select all
; <<>> DiG 9.1.3 <<>> @ns.icann.org . ns
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 733
;; flags: qr rd; QUERY: 1, ANSWER: 13, AUTHORITY: 0, ADDITIONAL: 13
;; QUESTION SECTION:
;. IN NS
;; ANSWER SECTION:
. 195037 IN NS H.ROOT-SERVERS.NET.
. 195037 IN NS C.ROOT-SERVERS.NET.
. 195037 IN NS G.ROOT-SERVERS.NET.
. 195037 IN NS F.ROOT-SERVERS.NET.
. 195037 IN NS B.ROOT-SERVERS.NET.
. 195037 IN NS J.ROOT-SERVERS.NET.
. 195037 IN NS K.ROOT-SERVERS.NET.
. 195037 IN NS L.ROOT-SERVERS.NET.
. 195037 IN NS M.ROOT-SERVERS.NET.
. 195037 IN NS I.ROOT-SERVERS.NET.
. 195037 IN NS E.ROOT-SERVERS.NET.
. 195037 IN NS D.ROOT-SERVERS.NET.
. 195037 IN NS A.ROOT-SERVERS.NET.
;; ADDITIONAL SECTION:
H.ROOT-SERVERS.NET. 281437 IN A 128.63.2.53
C.ROOT-SERVERS.NET. 281437 IN A 192.33.4.12
G.ROOT-SERVERS.NET. 281437 IN A 192.112.36.4
F.ROOT-SERVERS.NET. 281437 IN A 192.5.5.241
B.ROOT-SERVERS.NET. 281437 IN A 192.228.79.201
J.ROOT-SERVERS.NET. 281437 IN A 192.58.128.30
K.ROOT-SERVERS.NET. 281437 IN A 193.0.14.129
L.ROOT-SERVERS.NET. 281437 IN A 198.32.64.12
M.ROOT-SERVERS.NET. 281437 IN A 202.12.27.33
I.ROOT-SERVERS.NET. 281437 IN A 192.36.148.17
E.ROOT-SERVERS.NET. 281437 IN A 192.203.230.10
D.ROOT-SERVERS.NET. 281437 IN A 128.8.10.90
A.ROOT-SERVERS.NET. 281437 IN A 198.41.0.4
;; Query time: 200 msec
;; SERVER: 192.0.34.126#53(ns.icann.org)
;; WHEN: Sun Aug 1 00:45:02 2004
;; MSG SIZE rcvd: 436
default.hosts
Code: Select all
$TTL 1W
@ IN SOA ns.pxnet.de. root (
2004071315
8H
2H
1W
11H )
@ IN NS ns.pxnet.de.
@ IN NS ns.schlund.de.
@ IN A 217.160.134.81
* IN A 217.160.134.81
@ IN MX 80 mx
* IN MX 80 mx
Danke schon einmal vorab für eure Antworten!
Gruß Kane